CVE-2025-57711

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later

Score

CVSS 3.1 4.9 Medium

Status

Analyzed - security@qnapsecurity.com.tw

Published

2026-02-11

Last modified

2026-02-11

Weaknesses

CWE-770

Affected products

• Qsync Central (Qnap)
• Qsync Central (Qnap Systems Inc.)

References

• https://www.qnap.com/en/security-advisory/qsa-26-02