CVE-2026-41541 Symlink creation in qsyncsrv.cgi

An unix symbolic link symlink following vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Qsync...

CVE-2026-41541

The Qsync Central application is vulnerable to a Unix symbolic link (symlink) following vulnerability (CWE-61) within qsyncsrv.cgi . A remote attacker who has obtained a user account can exploit this flaw to compromise the system's security. Remediation is available in versions 5.0.0.7 , 5.1.0.3 ...

CVE-2026-24718 Path Traversal Vulnerability in Qsync Central's qsyncsrv.cgi

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...

CVE-2026-24718

A path traversal vulnerability affects Qsync Central in the qsyncsrv.cgi component. If a remote attacker obtains a user account, they can exploit this flaw to read unexpected files or system data . The vulnerability has been addressed in versions 5.0.0.7 , 5.1.0.3 , 5.2.0.5 , and 5.3.0.2 and late...

CVE-2025-29897

The software Qsync Central is affected by a buffer copy without checking size of input vulnerability, specifically identified as a stack-based buffer overflow in qsyncsrv.cgi . A remote attacker who has obtained a user account can exploit this flaw to modify memory or crash processes . The vulner...

CVE-2025-29897 Stack-based Buffer Overflow in qsyncsrv.cgi

A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Qsync...

CVE-2025-29896 NULL Pointer Dereference in qsyncsrv.cgi

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4...

CVE-2025-29896

A NULL pointer dereference vulnerability exists in Qsync Central , specifically within the qsyncsrv.cgi component. A remote attacker who has obtained a valid user account can exploit this flaw to execute a denial-of-service (DoS) attack. The vulnerability is addressed in Qsync Central version 5.0...

CVE-2025-29895 NULL Pointer Dereference in qsyncsrv.cgi

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4...

CVE-2025-29895

A NULL pointer dereference vulnerability exists in Qsync Central , specifically affecting the qsyncsrv.cgi component. A remote attacker who has obtained a valid user account can exploit this flaw to trigger a denial-of-service (DoS) attack. The vulnerability has been addressed in Qsync Central ve...