CVE-2025-54154

MEDIUM 6.8CVE-2025-54154 · Published 03/10/2025 · updated 18/10/2026

In short

CVE-2025-54154 is a MEDIUM (CVSS 6.8) vulnerability affecting authenticator (qnap).
Chance of exploitation in the next 30 days (EPSS): 0.22%, higher than 12.4% of all vulnerabilities.
Fix: update to 1.3.1.1227 or later.

Package	Affected versions	Patched versions
authenticator qnap	`≥ 1.3.0, < 1.3.1.1227`	`1.3.1.1227`

Description

An improper authentication vulnerability has been reported to affect QNAP Authenticator. If an attacker gains physical access, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: QNAP Authenticator 1.3.1.1227 and later

References

qnap.com/en/security-advisory/qsa-25-30 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free