High · published October 3, 2025
An unquoted search path or element vulnerability has been reported to affect NetBak Replicator. If a local attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands.
We have already fixed the vulnerability in the following version:
NetBak Replicator 4.5.15.0807 and later
| Product | Versions | Fixed in |
|---|---|---|
| qnap/netbak_replicator | ≥ 4.5.0.0209, < 4.5.15.0807 | 4.5.15.0807 |