CVE-2025-62851

A path traversal vulnerability has been reported to affect License Center. If a local attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: License Center 1.9.56 and later

CVSS v3 4.4 MEDIUM

4.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.qnap.com/en/security-advisory/qsa-26-35

Configurations

Configuration 1 (hide)

cpe:2.3:a:qnap:license_center:*:*:*:*:*:*:*:*

History

23 Jul 2026, 09:10

Type	Values Removed	Values Added
Summary		(es) Se ha reportado una vulnerabilidad de salto de ruta que afecta a License Center. Si un atacante local obtiene una cuenta de administrador, puede entonces explotar la vulnerabilidad para leer el contenido de archivos inesperados o datos del sistema. Ya hemos corregido la vulnerabilidad en la siguiente versión: License Center 1.9.56 y posteriores

17 Jun 2026, 13:19

Type	Values Removed	Values Added
References	~~{'url': 'https://www.qnap.com/en/security-advisory/qsa-26-28', 'tags': ['Broken Link'], 'source': 'security@qnapsecurity.com.tw'}~~	() https://www.qnap.com/en/security-advisory/qsa-26-35 -

12 Jun 2026, 13:47

Type	Values Removed	Values Added
References	~~() https://www.qnap.com/en/security-advisory/qsa-26-28 -~~	() https://www.qnap.com/en/security-advisory/qsa-26-28 - Broken Link
First Time		Qnap license Center Qnap
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 4.4
CPE		cpe:2.3:a:qnap:license_center::::::::

10 Jun 2026, 04:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-06-10 04:17

Updated : 2026-07-23 09:10

NVD link : CVE-2025-62851

Mitre link : CVE-2025-62851

CVE.ORG link : CVE-2025-62851

JSON object : View

Products Affected

qnap

license_center

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2025-62851", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-62851", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-10T15:55:47.995599Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 0.8}], "cvssMetricV40": [{"type": "Secondary", "source": "security@qnapsecurity.com.tw", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 4.6, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "UNREPORTED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "security@qnapsecurity.com.tw", "affectedData": [{"vendor": "QNAP Systems Inc.", "product": "License Center", "versions": [{"status": "affected", "version": "1.9.0", "lessThan": "1.9.56", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-06-10T04:17:11.913", "references": [{"url": "https://www.qnap.com/en/security-advisory/qsa-26-35", "source": "security@qnapsecurity.com.tw"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security@qnapsecurity.com.tw", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "A path traversal vulnerability has been reported to affect License Center. If a local attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data.\n\nWe have already fixed the vulnerability in the following version:\nLicense Center 1.9.56 and later"}, {"lang": "es", "value": "Se ha reportado una vulnerabilidad de salto de ruta que afecta a License Center. Si un atacante local obtiene una cuenta de administrador, puede entonces explotar la vulnerabilidad para leer el contenido de archivos inesperados o datos del sistema.\n\nYa hemos corregido la vulnerabilidad en la siguiente versi\u00f3n:\nLicense Center 1.9.56 y posteriores"}], "lastModified": "2026-07-23T09:10:00.113", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:qnap:license_center:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2483D14-61B9-4B4A-818F-4B2320659F69", "versionEndExcluding": "1.9.56", "versionStartIncluding": "1.9.36"}], "operator": "OR"}]}], "sourceIdentifier": "security@qnapsecurity.com.tw"}