CVE-2025-29894 | QNAP Qsync Central 4.3.0.11/4.4.0.15/4.4.0.16_20240819/4.5.0.6 User Account sql injection (qsa-25-22)
A vulnerability marked as critical has been reported in QNAP Qsync Central 4.3.0.11/4.4.0.15/4.4.0.16_20240819/4.5.0.6. The impacted element is an unknown function of the component User Account Handler. This manipulation causes sql injection.
This vulnerability is registered as CVE-2025-29894. Remote exploitation of the attack is possible. No exploit is available.
It is suggested to upgrade the affected component.