Approved changes feed: RSS · Atom

cpe:2.3:a:qnap_systems_inc.:hbs_3_hybrid_backup_sync:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorQnap Systems Inc. (1f66ac1e-0889-51bf-b27f-24c7175e5920)
ProductHbs 3 Hybrid Backup Sync (99a798bb-6687-564e-8491-4914610d2035)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-62842 vulnerable 2026-06-03 15:09:35.405339 HBS 3 Hybrid Backup Sync
An external control of file name or path vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read or modify files or directories. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 26.2.0.938 and later
Published: 2026-01-02T15:51:40.904Z
Updated: 2026-01-05T20:38:14.967Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62840 vulnerable 2026-06-03 15:09:35.402869 HBS 3 Hybrid Backup Sync
A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 26.2.0.938 and later
Published: 2026-01-02T15:51:34.972Z
Updated: 2026-01-05T20:38:20.032Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-53695 vulnerable 2026-06-03 14:57:39.909051 HBS 3 Hybrid Backup Sync
A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify memory or crash processes. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.4.952 and later
Published: 2025-03-07T16:13:42.883Z
Updated: 2025-03-07T17:54:53.580Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-50388 vulnerable 2026-06-03 14:57:24.127413 HBS 3 Hybrid Backup Sync
An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to execute commands. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.1.673 and later
Published: 2024-12-06T16:35:07.434Z
Updated: 2024-12-06T19:59:55.053Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.