{"id":"CVE-2025-62840","title":"A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync","summary":"A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read application dat…","severity":"low","cvss":3.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-209"],"vendor":"qnap","product":"hybrid_backup_sync","affected":["hybrid_backup_sync < 26.2.0.938"],"patched":["hybrid_backup_sync 26.2.0.938"],"published":"2026-01-02","updated":"2026-10-14","sourceUpdated":"2026-10-14T19:10:00.297","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-62840","references":[{"url":"https://www.qnap.com/en/security-advisory/qsa-25-46","label":"security@qnapsecurity.com.tw"}],"tags":["nvd"],"epss":0.00241,"epssPercentile":0.1418,"ingestedAt":"2026-10-14T19:49:57.547Z","slug":"CVE-2025-62840","body":"## Overview\n\nA generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read application data.\n\nWe have already fixed the vulnerability in the following version:\nHBS 3 Hybrid Backup Sync 26.2.0.938 and later\n\n## Affected\n\n- `hybrid_backup_sync < 26.2.0.938`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `hybrid_backup_sync 26.2.0.938`","depth":"sunlit","depthScore":18,"depthScoreParts":{"impact":18.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}