CVE-2025-62840Low· 3.3▾ SunlitA generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read application dat…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 18.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read application data.
We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 26.2.0.938 and later
hybrid_backup_sync < 26.2.0.938Upgrade past the affected range:
hybrid_backup_sync 26.2.0.938Connected by shared product, vendor, weakness, or advisory.
CVE-2025-62842High· 7.8An external control of file name or path vulnerability has been reported to affect HBS 3 Hybrid Backup Sync
CVE-2025-8852Medium· 4.3A vulnerability was identified in WuKongOpenSource WukongCRM 11.0
CVE-2024-23689High· 8.8Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and com.clickhouse:clickhouse-client versions less than 0.4.6 allows unauthorized users to gain access to client certificat…
CVE-2023-0833Medium· 4.7A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing an illegal value
CVE-2025-9110High· 7.5An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect several QNAP operating system versions
CVE-2025-59389Critical· 9.8An SQL injection vulnerability has been reported to affect Hyper Data Protector