vulnerability

QNAP QTS: CVE-2023-23367: Vulnerability in QTS, QuTS hero, and QuTScloud

Severity
6
CVSS
(AV:N/AC:L/Au:M/C:P/I:P/A:P)
Published
Nov 11, 2023
Added
Aug 4, 2025
Modified
Oct 16, 2025

Description

An OS command injection vulnerability has been reported to affect several QNAP operating systems. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.

Solution

qnap-qts-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.