CVE-2026-50619: Unauthenticated remote code execution vulnerability

Q: Which Qsirch versions need to be remediated?

Qsirch versions earlier than 7.0.3.0 are affected. The issue is fixed in Qsirch 7.0.3.0 and later.

Q: What access does an attacker need to exploit this issue?

The issue can be exploited remotely by an unauthenticated attacker. Successful exploitation could allow reading unexpected files or system data through path traversal.

Published Oct 15, 2026

Updated

A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the contents of unexpected files or system data.

We have already fixed the vulnerability in the following version: Qsirch 7.0.3.0 and later

Affected Software

1 affected component

QNAP Qsirch<7.0.3.0

Event History

Oct 15, 2026

CVE Published

via MITRE·09:38 AM

Data Sourced

via MITRE·09:38 AM

RemedyDescriptionWeakness

Frequently Asked Questions

Which Qsirch versions need to be remediated?

Qsirch versions earlier than 7.0.3.0 are affected. The issue is fixed in Qsirch 7.0.3.0 and later.

What access does an attacker need to exploit this issue?

The issue can be exploited remotely by an unauthenticated attacker. Successful exploitation could allow reading unexpected files or system data through path traversal.