CyberSecBulletin

Quantum vulnerabilities

We track 2 vulnerabilities in Quantum products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 25, 2025.

2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score

Latest Quantum vulnerabilities

  • 7.2 High severity

    StorNext: Use of Hard-coded Credentials

    CVE-2025-46617Quantum

    Quantum StorNext Web GUI API before 7.2.4 grants access to internal StorNext configuration and unauthorized modification of some software configuration parameters via undocumented user credentials. This affects StorNext RYO before 7.2.4, StorNext Xcellis Workf

  • 9.9 Critical severity

    StorNext: Unrestricted Upload of File with Dangerous Type

    CVE-2025-46616Quantum

    Quantum StorNext Web GUI API before 7.2.4 allows potential Arbitrary Remote Code Execution (RCE) via upload of a file. This affects StorNext RYO before 7.2.4, StorNext Xcellis Workflow Director before 7.2.4, and ActiveScale Cold Storage.