CVE-2019-7201

An unquoted service path vulnerability is reported to affect the service QVssService in QNAP NetBak Replicator. This vulnerability could allow an authorized but non-privileged local user to execute arbitrary code with elevated system privileges. QNAP have already fixed this issue in QNAP NetBak Replicator 4.5.12.1108.

• CWE-428

• https://www.qnap.com/zh-tw/security-advisory/nas-201912-02Vendor Advisory
• https://www.qnap.com/zh-tw/security-advisory/nas-201912-02Vendor Advisory

Published

Dec 4, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-7192This improper access control vulnerability allows remote att…9.8
• CVE-2019-7193This improper input validation vulnerability allows remote a…9.8
• CVE-2019-7194This external control of file name or path vulnerability all…9.8
• CVE-2019-7195This external control of file name or path vulnerability all…9.8
• CVE-2019-7197A stored cross-site scripting (XSS) vulnerability has been r…4.8
• CVE-2019-7198This command injection vulnerability allows attackers to exe…9.8
• CVE-2019-7211SmarterTools SmarterMail 16.x before build 6995 has stored X…
• CVE-2019-7212SmarterTools SmarterMail 16.x before build 6985 has hardcode…
• CVE-2019-7213SmarterTools SmarterMail 16.x before build 6985 allows direc…
• CVE-2019-7214SmarterTools SmarterMail 16.x before build 6985 allows deser…
• CVE-2019-7215Progress Sitefinity 10.1.6536 does not invalidate session co…
• CVE-2019-7216An issue was discovered in FileChucker 4.99e-free-e02. filec…