Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-48723: Qsync Central: Unauthorized Access and Crashes Possible

CVE-2025-48723 · published 8 months ago

Summary

A security issue in Qsync Central allows a hacker with a user account to potentially crash processes or alter system memory if they exploit the weakness. This affects older versions of Qsync Central. To fix this, update to version 5.0.0.4 or later, released on January 20, 2026.

What to do

Update qnap qsync_central to version 5.0.0.4 or later.

Affected software

Vendor	Product	Affected versions
qnap	qsync_central	>= 5.0.0.0, < 5.0.0.4 `cpe:2.3:a:qnap:qsync_central::::::::`

Original advisory text

A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. W...

A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes.

We have already fixed the vulnerability in the following version:
Qsync Central 5.0.0.4 ( 2026/01/20 ) and later

References

https://www.qnap.com/en/security-advisory/qsa-26-02 Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

0.6 Low

Exploitation

<1% chance of attack within 30 days

Type

CWE-120Classic Buffer Overflow

CWE-122Heap-based Buffer Overflow

Timeline

Published11 Feb 2026

Updated4 Nov 2026

First seen6 Mar 2026

Sources

CVE-2025-48723 · NVD

Track software like this

Free during beta