What’s Vulnerable › Products

QNAP Systems Inc. HBS 3 Hybrid Backup Sync vulnerabilities

8 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your QNAP Systems Inc. HBS 3 Hybrid Backup Sync version is affected

Exploited QNAP Systems Inc. HBS 3 Hybrid Backup Sync vulnerabilities

• CVE-2021-28799 — QNAP NAS Improper Authorization Vulnerability

Latest QNAP Systems Inc. HBS 3 Hybrid Backup Sync vulnerabilities

• CVE-2025-62841 — Hard-coded Cryptographic Key #2 (CVSS 8.7)
• CVE-2025-62839 — Hard-coded Cryptographic Key #1 (CVSS 8.7)
• CVE-2025-62842 — HBS 3 Hybrid Backup Sync (CVSS 7.8)
• CVE-2025-62840 — HBS 3 Hybrid Backup Sync (CVSS 3.3)
• CVE-2024-53695 — HBS 3 Hybrid Backup Sync (CVSS 9.1)
• CVE-2024-50388 — HBS 3 Hybrid Backup Sync (CVSS 9.8)
• CVE-2021-28809 — Missing Authentication for Critical Function in RTRR Server in HBS3 (CVSS 9.8)
• CVE-2021-28799 — QNAP NAS Improper Authorization Vulnerability (CVSS 9.8) — exploited