CVE-2025-30260: Qsync Central
An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource.
We have already fixed the vulnerability in the following version: Qsync Central 4.5.0.7 ( 2025/04/23 ) and later
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30260?
CVE-2025-30260 has been classified as a medium severity vulnerability.
How do I fix CVE-2025-30260?
To fix CVE-2025-30260, update Qsync Central to version 4.5.0.7 or later.
What systems are affected by CVE-2025-30260?
CVE-2025-30260 affects Qsync Central versions prior to 4.5.0.7.
What is the impact of CVE-2025-30260?
An attacker exploiting CVE-2025-30260 may prevent other systems and applications from accessing essential resources.
Who is potentially at risk from CVE-2025-30260?
Users of Qsync Central with exposed accounts are at risk from CVE-2025-30260.