Riskcovery

CVE-2025-62839

Hard-coded Cryptographic Key #1

State
Published
Severity
8.7 High
Published
Oct 29, 2026
Updated
Oct 29, 2026
Reserved
Oct 24, 2025

Read the record on cve.org

Description

An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system.

We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 26.4.0.521 and later Hybrid Backup Sync 26.4.0.521 and later Hybrid Backup Sync 26.4.1.563 and later

Scores

CVSSScoreVectorSource
4.08.7 HighCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:Nqnap

Weaknesses

Affected Products

ProductVersions
HBS 3 Hybrid Backup SyncQNAP Systems Inc.
  • 26.4.x to before 26.4.0.521Affected
Hybrid Backup SyncQNAP Systems Inc.
  • 26.4.x to before 26.4.0.521Affected
  • 26.4.x to before 26.4.1.563Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.