High severity · published Aug 29, 2025
CVE-2025-52861
A path traversal vulnerability has been reported to affect VioStor
7.0
CVSS
0.7%
EPSS
No
On KEV
Description
A path traversal vulnerability has been reported to affect VioStor. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data.
We have already fixed the vulnerability in the following version:
VioStor 5.1.6 build 20250621 and later
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VI
VioStor · QNAP Systems Inc.
5.1.0 before 5.1.6 build 20250621 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-52861
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-52861
www.qnap.com
https://www.qnap.com/en/security-advisory/qsa-25-28
More from VioStor
9.8
CVE-2025-52856
An improper authentication vulnerability has been reported to affect VioStor
