CVE-2022-27599

4.4 mediumEPSS 0.2%

Medium (4.4) in qnap qvr pro client. EPSS 0.2% chance of exploitation in the next 30 days.

An insertion of sensitive information into Log file vulnerability has been reported to affect product. If exploited, the vulnerability possibly provides local authenticated administrators with an additional, less-protected path to acquiring the information via unspecified vectors. We have already fixed the vulnerability in the following version: Windows 10 SP1, Windows 11, Mac OS, and Mac M1: QVR Pro Client 2.3.0.0420 and later

Severity

CVSS 3.1

4.4 medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2023-09-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

qnap:qvr_pro_client

References

https://www.qnap.com/en/security-advisory/qsa-23-08
https://www.qnap.com/en/security-advisory/qsa-23-08

Check your stack JSON