critical9.9
CVE-2025-46616
Quantum StorNext Web GUI API before 7.2.4 allows potential Arbitrary Remote Code Execution (RCE) via upload of a file.
Impact
Quantum StorNext Web GUI API before 7.2.4 allows potential Arbitrary Remote Code Execution (RCE) via upload of a file. This affects StorNext RYO before 7.2.4, StorNext Xcellis Workflow Director before 7.2.4, and ActiveScale Cold Storage.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Quantum | Quantum StorNext Web GUI API | before 7.2.4 |
| StorNext RYO | before 7.2.4 | |
| StorNext Xcellis Workflow Director | before 7.2.4 |
Versions were read from the advisory text. No structured product data has been published for this record yet.