vulnerability
QNAP QTS: CVE-2021-28804: Multiple Command Injection Vulnerabilities in QTS and QuTS hero
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:L/Au:N/C:P/I:P/A:P) | Jul 1, 2021 | Aug 4, 2025 | Oct 16, 2025 |
Severity
7
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Jul 1, 2021
Added
Aug 4, 2025
Modified
Oct 16, 2025
Description
Multiple command injection vulnerabilities have been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: QTS 4.5.1.1540 build 20210107 and later QuTS hero h4.5.1.1582 build 20210217 and later
Solution
qnap-qts-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.