CVE-2025-30262 | QNAP Qsync Central prior 5.0.0.0 User Account null pointer dereference (qsa-25-28)
A vulnerability, which was classified as problematic, has been found in QNAP Qsync Central 4.3.0.11/4.4.0.15/4.4.0.16_20240819/4.5.0.6/4.5.0.7. Affected by this vulnerability is an unknown functionality of the component User Account Handler. The manipulation leads to null pointer dereference.
This vulnerability is traded as CVE-2025-30262. It is possible to initiate the attack remotely. There is no exploit available.
It is advisable to upgrade the affected component.