Findings

CVE-2025-53597

A buffer overflow vulnerability has been reported to affect License Center.

Published Jan 2, 2026 · updated Oct 14, 2026 · qnap license center

A buffer overflow vulnerability has been reported to affect License Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: License Center 2.0.36 and later

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Jan 2, 2026 · NIST NVD

    Detected

    A buffer overflow vulnerability has been reported to affect License Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: License Center 2.0.36 and later

  2. Oct 14, 2026 · NIST NVD

    Updated

    A buffer overflow vulnerability has been reported to affect License Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: License Center 2.0.36 and later

Affected

  • cpe qnap/license centerversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2025-53597

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2025-53597

    30-day exploitation probability 0.6%

    first.org
  • NIST NVDVulnerability recordCVE-2025-53597

    A buffer overflow vulnerability has been reported to affect License Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: License

    nvd.nist.gov

References