Notification Center vulnerabilities

2 known vulnerabilities in Notification Center from QNAP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Notification Center: Cross-Site Request Forgery

  CVE-2025-58468Jun 10, 2026QNAP

  A cross-site request forgery (CSRF) vulnerability has been reported to affect Notification Center. The remote attackers can then exploit the vulnerability to gain privileges or hijack user identities. We have already fixed the vulnerability in the following ve

• 7.2 High severity

  Notification Center: Improper Neutralization of Input During Web Page Generation

  CVE-2025-54167Nov 7, 2025QNAP

  A cross-site scripting (XSS) vulnerability has been reported to affect Notification Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fix