8.1 HighCWE-89
CVE-2025-59389
No description published yet
Vendor not yet named
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 22 Oct
0.7%probability of exploitation in the next 30 days
Higher than 52% of scored CVEs
SeverityCVSS
8.1High
Description NVD
An SQL injection vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: Hyper Data Protector 2.2.4.1 and later
Coverage 1 article · 1 outlet
- QNAP fixed four vulnerabilities demonstrated at Pwn2Own Ireland 2025Security Affairs · first in our coverage · mentions it in passing