QNAP HBS 3 Hybrid Backup Sync
Moderate fix1 remedy
cpe:2.3:a:qnap:hybrid_backup_sync:*:*:*:*:*:*:*
Moderate fix1 remedy
- ~26.1
QNAP HBS 3 Hybrid Backup Sync External Control of File Name or Path Vulnerability
Vulnerability
Patched
A vulnerability allowing external control of file names or paths has been identified in QNAP HBS 3 Hybrid Backup Sync versions 26.1.x and earlier. This vulnerability can be exploited by an attacker with local network access to read or modify files and directories.
Impact
Exploitation of this vulnerability could lead to unauthorized reading or modification of files and directories on the affected system.
Remediation
Users are advised to update HBS 3 Hybrid Backup Sync to version 26.2.0.938 or later. Instructions for updating the application are available on the QNAP website.
Added: Jan 2, 2026, 4:23 PM
Updated: Jan 2, 2026, 4:51 PM
Vulnerability Rating
Custom Algorithm
spread
5.7impact
1.3exploitability
4.9remediation
7.7relevance
1.8threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.