Resource Allocation Flaw in Qsync Central by QNAP
CVE-2025-57711

3.6LOW

Key Information:

Vendor

QNAP
Status
Qsync Central
Vendor
CVE Published:
11 February 2026

What is CVE-2025-57711?

A resource allocation vulnerability in Qsync Central allows remote attackers with administrator privileges to exploit system resources without limits. This exploitation could disrupt access to critical resources for other applications and processes, posing a risk to system stability and performance. Versions prior to 5.0.0.4 are vulnerable, but a fix has been implemented in the latest version released on January 20, 2026. Users are urged to upgrade to protect against potential exploitation.

Affected Version(s)

Qsync Central 5.0.x.x < 5.0.0.4 ( 2026/01/20 )

References

https://www.qnap.com/en/security-advisory/qsa-26-02

CVSS V4

Score:
3.6
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

coral
.