CVE-2025-62840

LOW · 3.3 CVSS Gepubliceerd: 02-01-2026 CWE-209

Beschrijving

A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read application data.

We have already fixed the vulnerability in the following version:
HBS 3 Hybrid Backup Sync 26.2.0.938 and later

Vendors

Qnap

Affected products

Hybrid Backup Sync

References

www.qnap.com