9.3Crítica

CVE-2026-50619Unauthenticated remote code execution vulnerability

QNAP Systems Inc. Qsirch Publicada: (hace 1 mes)

Descripción

A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsirch 7.0.3.0 and later

Debilidad (CWE): CWE-22

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
QNAP Systems Inc. Qsirch 7.0.x – < 7.0.3.0

Referencias y parches