CVE-2025-57714

An unquoted search path or element vulnerability has been reported to affect NetBak Replicator. If a local attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: NetBak Replicator 4.5.15.0807 and later

Score

CVSS 4.0 8.5 High

Status

Analyzed - security@qnapsecurity.com.tw

Published

2025-10-03

Last modified

2026-10-18

Weaknesses

CWE-428

Affected products

• Netbak Replicator (Qnap)
• Netbak Replicator (Qnap Systems Inc.)

References

• https://www.qnap.com/en/security-advisory/qsa-25-39