An SQL injection vulnerability has been reported to affect Hyper Data Protector.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Jan 2, 2026 · NIST NVD

   Detected

   An SQL injection vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: Hyper Data Protector 2.2.4.1 and later

2. Oct 14, 2026 · NIST NVD

   Updated

   An SQL injection vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: Hyper Data Protector 2.2.4.1 and later

Affected

• cpe qnap/hyper data protectorversion unspecified
• cpe qnap/hyper data protector2.0.0.1115

Sources

• CVE.orgVulnerability recordCVE-2025-59389

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2025-59389

  30-day exploitation probability 0.7%

  first.org
• NIST NVDVulnerability recordCVE-2025-59389

  An SQL injection vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: Hyper Data Protector 2.2.4.1 and

  nvd.nist.gov

References

• Vendor Advisory · qnap.com