Threat Investigation
Request a demo

CVE-2025-52861

High

Description

A path traversal vulnerability has been reported to affect VioStor. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: VioStor 5.1.6 build 20250621 and later

SeverityHigh
CVSS7.0
Exploit probability—
ProductVioStor
PublishedAug 29, 2025
First seenAug 29, 2025
Weakness typeCWE-22Path traversal

How to fix

Update
  • QNAP Systems Inc. VioStor5.1.6 build 20250621 or later

Affected products

ProductAffected versionsFixed in
QNAP Systems Inc. VioStor5.1.0 ≤ v < 5.1.6 build 202506215.1.6 build 20250621

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.