Critical ASP.NET Vulnerability Impacts QNAP NetBak PC Agent

Critical ASP.NET Vulnerability Impacts QNAP NetBak PC Agent

First seen 2 Dec 2025, 18:33 UTC •Securityaffairs.CoFeeds.Feedburner •32.5

Article Content

Browse articles
ThreatCluster

QNAP has reported a critical ASP.NET Core vulnerability (CVE-2025-55315) affecting its NetBak PC Agent for Windows. This flaw allows attackers to hijack credentials, bypass security, and conduct HTTP smuggling attacks, with a CVSS score of 9.9. Users are urged to apply patches to mitigate the risks associated with this vulnerability.

How this analysis works

Extracted Entities

1 / 2