by Kastro
Paper/Archive/CVE-2026-50619

CVE-2026-50619

QNAP Systems Inc. Qsirch — Unauthenticated remote code execution vulnerability

EPSS 0.4%CVSS 9.3
critical.is priorityof 100
35
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 37.1.371 × 207.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsirch 7.0.3.0 and later

Affected

ProductAffectedFixed inSource
Qsirch7.0.x – < 7.0.3.07.0.3.0CNA

Scores by source

qnap (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refqnap.com/en/app-release-notes?keyword=Qsirch&app=Qsirch&product-line=nas