Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-57713

22
FAUCET Score

CVE-2025-57713 is a high-severity weak authentication vulnerability in QNAP File Station 5, affecting versions prior to 5.5.6.5166. This vulnerability allows unauthenticated remote attackers to gain sensitive information due to a lack of proper authentication mechanisms. While there is no known active exploitation, publicly available exploit code, or significant community discussion, the CVSS score of 7.5 and FAUCET Risk Score of 91/100 indicate a significant potential impact if exploited.

Impacted Technologies

VendorProductVersion(s)CPE
>= 5.5.6.4691, < 5.5.6.5190CPE matchmatch criteria
cpe:2.3:a:qnap:file_station:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 4.0

1.3LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
PASSIVE
VS Confidentiality
LOW
VS Integrity
NONE
VS Availability
NONE
SS Confidentiality
NONE
SS Integrity
NONE
SS Availability
NONE
Exploit Maturity
UNREPORTED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.51%
Probability of exploitation in next 30 days
EPSS Percentile
40.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0051 is in the 18th percentile among its peer group of 51,553 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Remediation records are not available for this CVE.

References

qnap.com / en/security-advisory/qsa-26-03
Vendor Advisory