← Database

CVE-2024-50388

CRITICAL CVSS: 9.8 Published: 2024-12-06 Modified: 2026-06-17

Description

An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to execute commands. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.1.673 and later

Affected Platforms

Qnap Hybrid Backup Sync

Weakness Type

CWE-77, CWE-78

References