CVE-2025-59389

CRITICAL · 9.8 CVSS Gepubliceerd: 02-01-2026 CWE-89

Beschrijving

An SQL injection vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands.

We have already fixed the vulnerability in the following versions:
Hyper Data Protector 2.2.4.1 and later

Vendors

Qnap

Affected products

Hyper Data Protector

References

www.qnap.com