QNAP NAS Multiple Vulnerabilities

Release Date: 24 Jun 2026 260 Views

RISK: Medium Risk

TYPE: Servers - Other Servers

Multiple vulnerabilities were identified in QNAP NAS. A remote attacker could exploit some of these vulnerabilities to trigger security restriction bypass, remote code execution, denial of service condition, sensitive information disclosure and elevation of privilege on the targeted system.

Impact

Denial of Service
Information Disclosure
Elevation of Privilege
Remote Code Execution
Security Restriction Bypass

System / Technologies affected

QVP 2.7.1
QuTS cloud c5.2.8
QTS version 5.2.7
QuTS hero h5.2.8

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

https://www.qnap.com/en/security-advisory/qsa-26-10

Vulnerability Identifier

Source

QNAP