VioStor vulnerabilities

2 known vulnerabilities in VioStor from QNAP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  VioStor: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-52861Aug 29, 2025QNAP

  A path traversal vulnerability has been reported to affect VioStor. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in

• 9.8 Critical severity

  VioStor: Improper Authentication

  CVE-2025-52856Aug 29, 2025QNAP

  An improper authentication vulnerability has been reported to affect VioStor. If a remote attacker, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: VioStor 5.1.