CVE-2026-50619 — Unauthenticated remote code execution vulnerability

CVE-2026-50619

Unauthenticated remote code execution vulnerability PUBLISHED

Description (CNA)

A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsirch 7.0.3.0 and later

Affected (CNA)

Vendor / product	Versions
QNAP Systems Inc. / Qsirch	affected 7.0.x before 7.0.3.0

CWE

CWE-22

References

https://www.qnap.com/en/app-release-notes?keyword=Qsirch&app=Qsirch&product-line=nas

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.