CVE-2025-57714

An unquoted search path or element vulnerability has been reported to affect NetBak Replicator. If a local attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: NetBak Replicator 4.5.15.0807 and later

Scoring

Severity

HIGH

CVSS base score

8.5

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS probability

0.21%

CWE

CWE-428

Published

2025-10-03

Last modified

2026-03-13

Affected products

• QNAP Systems Inc. NetBak Replicator

Weakness type

• CWE-428

Related vulnerabilities

• CVE-2026-77827 — Maono Link local privilege escalation
• CVE-2026-66839 — NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path...
• CVE-2026-18755 — GV-ASManager DLL hijacking vulnerability
• CVE-2026-9128 — Studio 5000 Logix Designer® – Multiple Vulnerabilities
• CVE-2026-8864 — HP Fan Control App – Potential Escalation of Privilege
• CVE-2025-71326 — AVAST Antivirus 25.11 Unquoted Service Path Privilege Escalation
• CVE-2023-54353 — Chromacam 4.0.3.0 Unquoted Service Path Privilege Escalation
• CVE-2022-50971 — Malwarebytes 4.5 Unquoted Service Path Privilege Escalation

Markdown version · Browse all CVEs