Volerion logoVolerion
Volerion logoVolerion

Qsync Central SQL Injection Vulnerability

Vulnerability

A SQL injection vulnerability has been identified in Qsync Central version 5.0.0. This vulnerability allows remote attackers with user accounts to execute unauthorized code or commands. The issue has been resolved in Qsync Central version 5.0.0.2, released on July 31, 2025.

Impact

Exploitation of this vulnerability allows for SQL injection, enabling attackers to execute unauthorized code or commands on the affected system.

Remediation

Users are advised to update Qsync Central to version 5.0.0.2 or later. Instructions for updating Qsync Central are available on the QNAP website.

Added: Oct 3, 2025, 7:18 PM
Updated: Oct 3, 2025, 7:18 PM

Vulnerability Rating

Custom Algorithm
spread
6.2
impact
7.5
exploitability
5.2
remediation
7.7
relevance
0.6
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.