vulnerability
QNAP QTS: CVE-2023-32967: Vulnerability in QTS and QuTScloud
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:P/I:N/A:N) | Feb 3, 2024 | Aug 4, 2025 | Mar 25, 2026 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:P/I:N/A:N)
Published
Feb 3, 2024
Added
Aug 4, 2025
Modified
Mar 25, 2026
Description
An incorrect authorization vulnerability has been reported to affect certain QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to bypass intended access restrictions.
Solution
qnap-qts-upgrade-latest
References
- CWE-863
- CWE-285
- CVE-2023-32967
- https://attackerkb.com/topics/CVE-2023-32967
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32967
- https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2023-32967
- https://www.qnap.com/en-uk/security-advisory/QSA-24-01
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-37188
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.