QNAP HBS 3 Hybrid Backup Sync
Moderate fix1 remedy
cpe:2.3:a:qnap:hybrid_backup_sync:*:*:*:*:*:*:*
Moderate fix1 remedy
- ~26.1
QNAP HBS 3 Hybrid Backup Sync Sensitive Information Disclosure Vulnerability
Vulnerability
Patched
A vulnerability has been identified in QNAP HBS 3 Hybrid Backup Sync versions 26.1.x and earlier, allowing for the generation of error messages that inadvertently disclose sensitive information. This vulnerability can be exploited by an attacker with local network access to read application data.
Impact
Exploitation of this vulnerability could lead to unauthorized access to sensitive application data.
Remediation
Users are advised to update HBS 3 Hybrid Backup Sync to version 26.2.0.938 or later. Instructions for updating the application are available on the QNAP website.
Added: Jan 2, 2026, 4:24 PM
Updated: Jan 2, 2026, 4:51 PM
Vulnerability Rating
Custom Algorithm
spread
5.7impact
2.5exploitability
4.9remediation
7.7relevance
1.8threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.