StorNext vulnerabilities

2 known vulnerabilities in StorNext from Quantum. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  StorNext: Use of Hard-coded Credentials

  CVE-2025-46617Apr 25, 2025Quantum

  Quantum StorNext Web GUI API before 7.2.4 grants access to internal StorNext configuration and unauthorized modification of some software configuration parameters via undocumented user credentials. This affects StorNext RYO before 7.2.4, StorNext Xcellis Workf

• 9.9 Critical severity

  StorNext: Unrestricted Upload of File with Dangerous Type

  CVE-2025-46616Apr 25, 2025Quantum

  Quantum StorNext Web GUI API before 7.2.4 allows potential Arbitrary Remote Code Execution (RCE) via upload of a file. This affects StorNext RYO before 7.2.4, StorNext Xcellis Workflow Director before 7.2.4, and ActiveScale Cold Storage.