CVE-2023-47564: QNAP Qsync Central

High severity, CVSS 8.1. EPSS: 1% chance of exploitation in the next 30 days.

An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network. We have already fixed the vulnerability in the following versions: Qsync Central 4.4.0.15 ( 2024/01/04 ) and later Qsync Central 4.3.0.11 ( 2024/01/11 ) and later

Affected products

• QNAP Qsync Central: from 4.3.0.0, before 4.3.0.11 (fixed in 4.3.0.11); from 4.4.0.0, before 4.4.0.15 (fixed in 4.4.0.15)

Published 2024-02-02. Last modified 2026-06-17.