CVE-2025-58468: Notification Center
Published Jun 10, 2026
·Updated
A cross-site request forgery (CSRF) vulnerability has been reported to affect Notification Center. The remote attackers can then exploit the vulnerability to gain privileges or hijack user identities.
We have already fixed the vulnerability in the following version: Notification Center 1.10.0.3291 and later
Affected Software
2 affected components
Notification Center<1.10.0.3291
QNAP Notification Center>=1.10.0<1.10.0.3291
Event History
Jun 10, 2026
CVE Published
via MITRE·01:38 AM
Data Sourced
via MITRE·01:38 AM
RemedyDescriptionWeakness
Data Sourced
via NVD·03:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-58468?
The severity of CVE-2025-58468 is rated as medium with a CVSS score of 5.1.
2
What type of vulnerability is CVE-2025-58468?
CVE-2025-58468 is a cross-site request forgery (CSRF) vulnerability.
3
Who is affected by CVE-2025-58468?
Users of Notification Center prior to version 1.10.0.3291 are affected by CVE-2025-58468.
4
How do I fix CVE-2025-58468?
To fix CVE-2025-58468, upgrade to Notification Center version 1.10.0.3291 or later.
5
What can attackers do with CVE-2025-58468?
Attackers can exploit CVE-2025-58468 to gain privileges or hijack user identities.