ZDI-CAN-28353: ZDI-26-216: (Pwn2Own) QNAP TS-453E smbd domain_name Argument Injection Authentication Bypass Vulnerability

Published Mar 17, 2026

Updated

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of QNAP TS-453E devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.3. The following CVEs are assigned: CVE-2025-62847.

Affected Software

1 affected component

QNAP TS-453E

Event History

Mar 17, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-28353?

The severity of ZDI-CAN-28353 is critical due to its potential for authentication bypass.

How do I fix ZDI-CAN-28353?

To fix ZDI-CAN-28353, ensure that you apply the latest firmware updates provided by QNAP for the TS-453E device.

What systems are affected by ZDI-CAN-28353?

ZDI-CAN-28353 affects QNAP TS-453E devices specifically.

Can ZDI-CAN-28353 be exploited remotely?

Yes, ZDI-CAN-28353 can be exploited by network-adjacent attackers without requiring authentication.

What are the potential impacts of ZDI-CAN-28353?

The potential impacts of ZDI-CAN-28353 include unauthorized access to sensitive data and control over the affected device.