PatchTheCVEqatraq vulnerabilities and fixes
Recent CVEs affecting qatraq, with upgrade or downgrade steps. 2 tracked.
qatraq has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-11-17. Highest priority: CVE-2025-63747 (score 54/100).
- CVE-2025-63748 HIGH 8.8 DOWNGRADE QaTraq 6.9.2 allows authenticated users to upload arbitrary files via the "Add Attachment" feature in the "Tes
- CVE-2025-63747 CRITICAL 9.8 DOWNGRADE QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and perm
FAQ
How do I fix qatraq vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is qatraq being exploited right now?
None of the tracked qatraq CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which qatraq CVE should I patch first?
CVE-2025-63747 currently ranks highest (54/100): QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and perm.