QNAP Hyper Data Protector SQL Injection Vulnerability Allowing Unauthorized Code Execution
Vulnerability
A SQL injection vulnerability has been identified in QNAP Hyper Data Protector versions 2.2.x. This vulnerability allows remote attackers to execute unauthorized code or commands on the affected system.
Impact
Exploitation of this vulnerability could lead to unauthorized code execution on the server where Hyper Data Protector is running.
Remediation
Users are advised to update QNAP Hyper Data Protector to version 2.2.4.1 or later. Instructions for updating the application are available on the QNAP website.
Added: Jan 2, 2026, 4:24 PM
Updated: Jan 2, 2026, 4:52 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
7.4remediation
7.7relevance
1.8threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.