Resource Allocation Flaw in Qsync Central by QNAP

CVE-2025-44012

What is CVE-2025-44012?

A vulnerability has been identified in Qsync Central, which could allow a remote attacker with a valid user account to disrupt resource access for other systems or applications. This flaw involves inadequate limits on resource allocation and could lead to a denial-of-service scenario for legitimate users. To address this vulnerability, QNAP has released an update in Qsync Central version 5.0.0.2 and later, effectively closing the door on potential exploitation.

References