qsync_central vulnerabilities
CVEs whose affected-version data names the qsync_central package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
6 CVEsRSS
CVE-2026-26243High· 7.2A path traversal vulnerability has been reported to affect Qsync Central
A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed …
CVE-2026-41541Medium· 5.3An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central
An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have alre…
CVE-2026-24718Medium· 5.3A path traversal vulnerability has been reported to affect Qsync Central
A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed …
CVE-2025-29897Low· 2.3A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central
A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have alread…
CVE-2025-29896Low· 2.3A NULL pointer dereference vulnerability has been reported to affect Qsync Central
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the…
CVE-2025-29895Low· 2.3A NULL pointer dereference vulnerability has been reported to affect Qsync Central
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the…