QNAP Qsync Central
Moderate fix1 remedy
cpe:2.3:a:qnap:qsync_central:*:*:*:*:*:*:*
Moderate fix1 remedy
- ~5.0
Qsync Central Relative Path Traversal Vulnerability
Vulnerability
Patched
A relative path traversal vulnerability exists in Qsync Central versions 5.0.x. This vulnerability allows remote attackers with user accounts to read unintended files or system data. The issue has been resolved in Qsync Central version 5.0.0.4, released on January 20, 2026.
Impact
Exploitation of this vulnerability could lead to unauthorized access to sensitive files or system data.
Remediation
Users are advised to update Qsync Central to version 5.0.0.4 or later. Instructions for updating Qsync Central are available on the QNAP website.
Added: Feb 11, 2026, 1:23 PM
Updated: Feb 11, 2026, 5:11 PM
Vulnerability Rating
Custom Algorithm
spread
6.2impact
2.5exploitability
6.6remediation
7.7relevance
3.0threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.