QNAP Qsirch 7.0.3 Path Traversal Fix Remote File Read Vuln
CVE-2026-50619 Published on October 15, 2026
Unauthenticated remote code execution vulnerability
A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the contents of unexpected files or system data.
We have already fixed the vulnerability in the following version:
Qsirch 7.0.3.0 and later
Vulnerability Analysis
CVE-2026-50619 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Weakness Type
What is a Directory traversal Vulnerability?
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
CVE-2026-50619 has been classified to as a Directory traversal vulnerability or weakness.
Affected Versions
QNAP Systems Inc. Qsirch:- Version 7.0.x and below 7.0.3.0 is affected.