Path Traversal Weakness in Qsirch by QNAP
CVE-2026-50619

9.3CRITICAL

Key Information:

Vendor

QNAP
Status
Qsirch
Vendor
CVE Published:
15 October 2026

What is CVE-2026-50619?

A path traversal vulnerability has been identified in Qsirch, a search application from QNAP. This flaw potentially allows remote attackers to gain unauthorized access to sensitive files or system data by manipulating file paths. It is crucial for users to update to version 7.0.3.0 or later to mitigate the risk associated with this vulnerability and ensure the security of their systems.

Affected Version(s)

Qsirch 7.0.x < 7.0.3.0

References

https://www.qnap.com/en/app-release-notes?keyword=Qsirch&...
release-notes

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

rewhile test
.