CVE-2025-52861CWE-22path-traversal

CVE-2025-52861

published August 29, 2025

CVSS
7.0
EPSS
1%
Percentile
50.6
In the wild
Unconfirmed
What it is

A path traversal vulnerability has been reported to affect VioStor. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data.

We have already fixed the vulnerability in the following version:

VioStor 5.1.6 build 20250621 and later

The record
Technical detail
CVSS
7.0 · NONE
CVSS v4.0
Not supplied
EPSS
0.00652 · 50.6th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2025-08-29T22:15Z
References (1)
https://www.qnap.com/en/security-advisory/qsa-25-28 · [email protected]
EPSS history
Timeline
  • 29 AUG 17:17Z
    VioStor
    cvelistv5