Unrated severityNVD Advisory· Published Jan 2, 2026· Updated Jan 5, 2026
HBS 3 Hybrid Backup Sync
CVE-2025-62840
Description
A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read application data.
We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 26.2.0.938 and later
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <26.2.0.938
- QNAP Systems Inc./HBS 3 Hybrid Backup Syncv5Range: 26.1.x
Patches
Vulnerability mechanics
References
1News mentions
1- ZDI-26-242: (Pwn2Own) QNAP TS-453E server_handlers.pyc rr2s.kwargs Error Message Information Disclosure VulnerabilityZero Day Initiative · Mar 30, 2026