7.0 HighCWE-73
CVE-2025-62842
HBS 3 Hybrid Backup Sync
QNAP Systems Inc.HBS 3 Hybrid Backup Sync
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.3%probability of exploitation in the next 30 days
Higher than 18% of scored CVEs
SeverityCVSS
7.0High
Description NVD
An external control of file name or path vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read or modify files or directories. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 26.2.0.938 and later
Coverage 1 article · 1 outlet
- QNAP Patches Four Vulnerabilities Exploited at Pwn2OwnSecurityWeek · first in our coverage · mentions it in passing