Resource Allocation Vulnerability in Qsync Central by QNAP
CVE-2025-44007

7.1HIGH

Key Information:

Vendor

QNAP

Vendor
CVE Published:
3 October 2025

What is CVE-2025-44007?

A vulnerability has been identified in Qsync Central, enabling remote attackers with user account access to exploit resource allocation without proper limits. This flaw can allow such attackers to impede the functioning of other systems, applications, or processes by monopolizing essential resources, leading to operational disruptions. Users are advised to upgrade to version 5.0.0.1 or later to mitigate this risk. For further details, refer to the QNAP security advisory.

Affected Version(s)

Qsync Central 4.x < 5.0.0.1 ( 2025/07/09 )

References

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

coral
.
CVE-2025-44007 : Resource Allocation Vulnerability in Qsync Central by QNAP