Cross-Site Request Forgery Vulnerability in QuLog Center by QNAP
CVE-2025-58469

1.2LOW

Key Information:

Vendor

QNAP
Status
Qulog Center
Vendor
CVE Published:
7 November 2025

What is CVE-2025-58469?

A cross-site request forgery (CSRF) vulnerability in QuLog Center enables remote attackers to exploit user sessions, potentially gaining privileges or hijacking user identities. This security flaw can lead to unauthorized actions on behalf of users if exploited. Users are strongly advised to update to QuLog Center version 1.8.2.927 or later to mitigate the risks associated with this vulnerability.

Affected Version(s)

QuLog Center 1.8.x.x < 1.8.2.927 ( 2025/09/17 )

References

https://www.qnap.com/en/security-advisory/qsa-25-42

CVSS V4

Score:
1.2
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tim Coen
JSON
.
CVE-2025-58469 : Cross-Site Request Forgery Vulnerability in QuLog Center by QNAP