{"id":"CVE-2025-59387","title":"An SQL injection vulnerability has been reported to affect MARS (Multi-Application Recovery Service)","summary":"An SQL injection vulnerability has been reported to affect MARS (Multi-Application Recovery Service). The remote attackers can then exploit the vulnerability to execute unauthorized code or commands.\n\nWe have already fixed the vulnerabil…","severity":"none","cwe":["CWE-89"],"published":"2026-01-02","updated":"2026-10-14","sourceUpdated":"2026-10-14T19:10:00.297","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-59387","references":[{"url":"https://www.qnap.com/en/security-advisory/qsa-25-53","label":"security@qnapsecurity.com.tw"}],"tags":["nvd"],"epss":0.00375,"epssPercentile":0.29764,"ingestedAt":"2026-10-14T19:49:57.546Z","slug":"CVE-2025-59387","body":"## Overview\n\nAn SQL injection vulnerability has been reported to affect MARS (Multi-Application Recovery Service). The remote attackers can then exploit the vulnerability to execute unauthorized code or commands.\n\nWe have already fixed the vulnerability in the following version:\nMARS (Multi-Application Recovery Service) 1.2.1.1686 and later\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}