vulnerability
QNAP QTS: CVE-2023-39294: Vulnerability in QTS and QuTS hero
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:L/Au:M/C:P/I:P/A:P) | Jan 6, 2024 | Aug 4, 2025 | Oct 16, 2025 |
Severity
6
CVSS
(AV:N/AC:L/Au:M/C:P/I:P/A:P)
Published
Jan 6, 2024
Added
Aug 4, 2025
Modified
Oct 16, 2025
Description
An OS command injection vulnerability has been reported to affect certain QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.
Solution
qnap-qts-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.