QNAP QTS: CVE-2022-27598: Vulnerabilities in QTS, QuTS hero, QuTScloud, and QVP

Two vulnerabilities have been reported to affect multiple QNAP operating systems. If exploited, these vulnerabilities allow remote authenticated administrators to get secret values. The vulnerabilities affect the following QNAP operating systems: QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances) We have already fixed the vulnerabilities in the following operating system versions: QTS 5.0.1.2346 build 20230322 and later QuTS hero h5.0.1.2348 build 20230324 and later QNAP is urgently fixing the vulnerabilities in QuTScloud and QVP. Please check this security advisory regularly for updates and promptly update your operating system to the latest recommended version as soon as it is available.