HB
Product
Hybrid Backup Sync
by Qnap · last CVE Jan 2, 2026
On CISA KEVExploited in the wildRansomware-linked
6
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 1Medium 0Low 1
Watch

Add Hybrid Backup Sync to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-28799
RansomwareIn wildKEV
9.8
78%
May 13
Improper Authorization Vulnerability in HBS 3 (Hybrid Backup Sync)
Affected: before 16.0.0415; before 3.0.210412; before 3.0.210411; before 16.0.0419; before 16.0.0419
CVE-2024-50388
9.8
2%
Dec 6
An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync
Affected: 25.1.0.627
CVE-2021-28809
9.8
16%
Jul 8
An improper access control vulnerability has been reported to affect certain legacy versions of HBS 3
Affected: before 3.0.210507; before 3.0.210506; before 3.0.210506
CVE-2024-53695
9.1
1%
Mar 7
A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync
Affected: 25.1.0.627 before 25.1.4.952
CVE-2025-62842
7.8
0%
Jan 2
An external control of file name or path vulnerability has been reported to affect HBS 3 Hybrid Backup Sync
Affected: before 26.2.0.938
CVE-2025-62840
3.3
0%
Jan 2
A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync
Affected: before 26.2.0.938
Showing 6