CVE-2021-28809

CRITICAL 9.8CVE-2021-28809 · Published 08/07/2021 · updated 17/06/2026

Package	Affected versions	Patched versions
hybrid backup sync qnap	`< 3.0.210506< 3.0.210507`	`3.0.2105063.0.210507`

Description

An improper access control vulnerability has been reported to affect certain legacy versions of HBS 3. If exploited, this vulnerability allows attackers to compromise the security of the operating system.QNAP have already fixed this vulnerability in the following versions of HBS 3: QTS 4.3.6: HBS 3 v3.0.210507 and later QTS 4.3.4: HBS 3 v3.0.210506 and later QTS 4.3.3: HBS 3 v3.0.210506 and later

References

qnap.com/en/security-advisory/qsa-21-19 · Vendor Advisory
zerodayinitiative.com/advisories/ZDI-21-783 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free