cve.bz

CVE-2025-62842

7.0 highEPSS 0.3%

High (7.0) in qnap hybrid backup sync. EPSS 0.3% chance of exploitation in the next 30 days.

An external control of file name or path vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read or modify files or directories. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 26.2.0.938 and later

Severity

CVSS 4.0

7.0 high
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.8 high
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
CWE
CWE-73
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON