SQL Injection Vulnerability in Qsync Central by QNAP

CVE-2025-29894

What is CVE-2025-29894?

An SQL injection vulnerability has been discovered in Qsync Central, where a remote attacker can exploit the weakness if they gain access to a user account. Through this vulnerability, unauthorized commands or code may be executed, potentially compromising the system's integrity. It is crucial for users of Qsync Central to update to version 4.5.0.7 or later to ensure protection against such exploits.

References