CVE-2025-52861 — Path Traversal in Systems INC Viostor

CWE-22 — Path Traversal3 documents3 sources
Severity
7.0HIGHNVD
EPSS
0.4%
top 40.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Qnap Systems INC Viostor
Timeline
PublishedAug 29

Description

A path traversal vulnerability has been reported to affect VioStor. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: VioStor 5.1.6 build 20250621 and later

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages1 packages

▶CVEListV5qnap_systems_inc/viostor5.1.0 — 5.1.6 build 20250621

🔴Vulnerability Details

2
CVEList
VioStor↗2025-08-29
▶
GHSA
GHSA-9277-pf66-9w4c: A path traversal vulnerability has been reported to affect VioStor↗2025-08-29
▶
CVE-2025-52861 — Path Traversal in Systems INC Viostor | cvebase