QNAP Netbak Replicator vulnerabilities

2 CVEs affecting QNAP Netbak Replicator, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-57714, published 2025-10-03.

More from QNAP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-7201, published 2019-12-04. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. An unquoted service path vulnerability is reported to affect the service QVssService in QNAP NetBak Replicator. This vulnerability could allow an authorized but non-privileged local user to execute…
• CVE-2025-57714, published 2025-10-03. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. An unquoted search path or element vulnerability has been reported to affect NetBak Replicator. If a local attacker gains a user account, they can then exploit the vulnerability to execute…