CVE-2025-57711

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource.

We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Feb 11, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-577126.5A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit tCVE-2025-577137.5A weak authentication vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to gCVE-2025-577147.8An unquoted search path or element vulnerability has been reported to affect NetBak Replicator. If a local attacker gains a user account, thCVE-2025-577167.3An Uncontrolled Search Path Element vulnerability [CWE-427] in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versioCVE-2025-577277.5In JetBrains IntelliJ IDEA before 2025.2 credentials disclosure was possible via remote referenceCVE-2025-577286.5In JetBrains IntelliJ IDEA before 2025.2 improper access control allowed Code With Me guest to discover hidden filesCVE-2025-577297.3In JetBrains IntelliJ IDEA before 2025.2 unexpected plugin startup was possible due to automatic LSP server startCVE-2025-577304.6In JetBrains IntelliJ IDEA before 2025.2 hTML injection was possible via Remote Development featureCVE-2025-577315.4In JetBrains YouTrack before 2025.2.92387 stored XSS was possible via Mermaid diagram contentCVE-2025-577326.3In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect directory ownershipCVE-2025-577333.8In JetBrains TeamCity before 2025.07.1 sMTP injection was possible allowing modification of email contentCVE-2025-577346.5In JetBrains TeamCity before 2025.07.1 aWS credentials were exposed in Docker script files
CVE-2025-57711: Medium severity, CVSS 4.9 | Vulnix