CVE-2025-59388

6.6 mediumEPSS 0.5%

Medium (6.6) in qnap hyper data protector. EPSS 0.5% chance of exploitation in the next 30 days.

A use of hard-coded password vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to gain unauthorized access. We have already fixed the vulnerability in the following version: Hyper Data Protector 2.3.1.455 and later

Severity

CVSS 4.0

6.6 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWE: CWE-259
Published: 2026-03-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

qnap:hyper_data_protector

References

https://www.qnap.com/en/security-advisory/qsa-25-48

Check your stack JSON