Quantum

Products

ProductCVEsExploitedLatest
StorNext2–Apr 25, 2025

Exploited and recent CVEs

  • CVE-2025-46617 High 7.2 Quantum StorNext Web GUI API before 7.2.4 grants access to internal StorNext configuration and unauthorized modification of some software configuration parameters via undocumented user credentials. Th 0.3%
  • CVE-2025-46616 Critical 9.9 Quantum StorNext Web GUI API before 7.2.4 allows potential Arbitrary Remote Code Execution (RCE) via upload of a file. This affects StorNext RYO before 7.2.4, StorNext Xcellis Workflow Director before 0.7%