Unquoted Search Path Vulnerability in NetBak Replicator by QNAP
CVE-2025-57714

8.5HIGH

Key Information:

Vendor

QNAP
Status
Netbak Replicator
Vendor
CVE Published:
3 October 2025

What is CVE-2025-57714?

An unquoted search path vulnerability has been identified in NetBak Replicator, allowing a local attacker with a user account to exploit this weakness. By manipulating the search path, the attacker can execute unauthorized code or commands, posing significant risks to system integrity. It is crucial for users of NetBak Replicator to upgrade to version 4.5.15.0807 or later to safeguard against this vulnerability.

Affected Version(s)

NetBak Replicator 4.5.x < 4.5.15.0807

References

https://www.qnap.com/en/security-advisory/qsa-25-39

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc.
JSON
.
CVE-2025-57714 : Unquoted Search Path Vulnerability in NetBak Replicator by QNAP