7.0 HighCWE-209
CVE-2025-62840
No description published yet
Vendor not yet named
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 23 Oct
0.2%probability of exploitation in the next 30 days
Higher than 14% of scored CVEs
SeverityCVSS
7.0High
Description NVD
A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 26.2.0.938 and later
Coverage 2 articles · 2 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Mon 23 Mar · 11:36 UTC | SecurityWeek | QNAP Patches Four Vulnerabilities Exploited at Pwn2Own |
| Mon 23 Mar · 21:53 UTC | Security Affairs | QNAP fixed four vulnerabilities demonstrated at Pwn2Own Ireland 2025 |
- QNAP fixed four vulnerabilities demonstrated at Pwn2Own Ireland 2025Security Affairs · mentions it in passing
- QNAP Patches Four Vulnerabilities Exploited at Pwn2OwnSecurityWeek · first in our coverage · mentions it in passing