cve.nowby Sazabi
← All vulnerabilities
CVE-2026-50619

Unauthenticated remote code execution vulnerability

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Fix
Fixed in 7.0.3.0
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: yes
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsirch 7.0.3.0 and later

Affected versions

  • QNAP Systems Inc. Qsirch

    From 7.0.x · fixed in 7.0.3.0

References 1

qnap.com