QNAP Qfiling Path Traversal Vulnerability Allowing Unauthorized File Access
Vulnerability
A path traversal vulnerability exists in QNAP Qfiling versions 3.13.x. This vulnerability allows remote attackers to read unintended files or system data. The issue has been resolved in Qfiling version 3.13.1 and later.
Impact
Exploitation of this vulnerability could lead to unauthorized access to sensitive files or system data.
Remediation
Users are advised to update Qfiling to the latest version. Instructions for updating Qfiling are available on the QNAP website.
Added: Jan 2, 2026, 4:25 PM
Updated: Jan 2, 2026, 4:53 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
7.4remediation
7.7relevance
1.8threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.