CVE-2025-30276
Analyzed
Analyzed - Analysis Complete
Out-of-Bounds Write in Qsync Central Allows Memory Corruption
Publication date: 2026-02-11
Last updated on: 2026-02-11
Assigner: QNAP Systems, Inc.
Description
Description
An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory.
We have already fixed the vulnerability in the following version:
Qsync Central 5.0.0.4 ( 2026/01/20 ) and later
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| qnap | qsync_central | From 5.0.0.0 (inc) to 5.0.0.4 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-787 | The product writes data past the end, or before the beginning, of the intended buffer. |