A buffer overflow vulnerability has been reported to affect License Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: License Center 2.0.36 and later
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.qnap.com/en/security-advisory/qsa-25-52 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 1.2 · qnapNVD modified 2026-10-14 13:10
Affected (CPE criteria) 1
cpe:2.3:a:qnap:license_center:*:*:*:*:*:*:*:*
References 1
- https://www.qnap.com/en/security-advisory/qsa-25-52 Vendor Advisory