vulnerability

QNAP QTS: CVE-2023-23368: Vulnerability in QTS, QuTS hero, and QuTScloud

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
Nov 4, 2023
Added
Aug 4, 2025
Modified
Oct 16, 2025

Description

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to execute commands via a network.

Solution

qnap-qts-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.