CVE-2025-57714: NetBak Replicator

Q: What is the severity of CVE-2025-57714?

CVE-2025-57714 is considered a medium severity vulnerability due to the potential for local attackers to execute unauthorized code.

Q: How do I fix CVE-2025-57714?

To fix CVE-2025-57714, update to a version of NetBak Replicator that is newer than 4.5.15.0807.

Q: Can CVE-2025-57714 be exploited remotely?

No, CVE-2025-57714 requires local user access to exploit the vulnerability.

Q: What type of vulnerability is CVE-2025-57714?

CVE-2025-57714 is classified as an unquoted search path or element vulnerability.

Q: Who is affected by CVE-2025-57714?

Users of NetBak Replicator versions up to 4.5.15.0807 are affected by CVE-2025-57714.

Published Oct 3, 2025

Updated

An unquoted search path or element vulnerability has been reported to affect NetBak Replicator. If a local attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands.

We have already fixed the vulnerability in the following version: NetBak Replicator 4.5.15.0807 and later

Affected Software

2 affected components

NetBak Replicator<4.5.15.0807

QNAP NetBak Replicator>=4.5.0.0209<4.5.15.0807

Remediation

Information

We have already fixed the vulnerability in the following version: NetBak Replicator 4.5.15.0807 and later

Event History

Oct 3, 2025

CVE Published

via MITRE·06:15 PM

Data Sourced

via MITRE·06:15 PM

RemedyDescriptionWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-57714?

CVE-2025-57714 is considered a medium severity vulnerability due to the potential for local attackers to execute unauthorized code.

How do I fix CVE-2025-57714?