Hyper Data Protector vulnerabilities

2 known vulnerabilities in Hyper Data Protector from QNAP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Hyper Data Protector: Use of Hard-coded Password

  CVE-2025-59388Mar 12, 2026QNAP

  A use of hard-coded password vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to gain unauthorized access. We have already fixed the vulnerability in the following version: Hyper Data Prote

• 9.8 Critical severity

  Hyper Data Protector: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-59389Jan 2, 2026QNAP

  An SQL injection vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: Hyper Data Pro