Symlink Vulnerability in Qsync Central by QNAP
CVE-2026-41541

5.3MEDIUM

Key Information:

Vendor

QNAP
Status
Qsync Central
Vendor
CVE Published:
15 October 2026

What is CVE-2026-41541?

A vulnerability in Qsync Central allows an attacker with a user account to exploit a symlink following weakness. This could lead to unauthorized access and potential security compromise of the system. It is crucial for users to upgrade to Qsync Central versions 5.0.0.7 or later, as well as 5.1.0.3, 5.2.0.5, and 5.3.0.2, to mitigate this risk.

Affected Version(s)

Qsync Central 5.0.x < 5.0.0.7

Qsync Central 5.1.x < 5.1.0.3

Qsync Central 5.2.x < 5.2.0.5

References

https://www.qnap.com/en/app-release-notes?keyword=Qsync%2...
release-notes

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jun Rong
.