vulnerability
QNAP QTS: CVE-2023-39296: Vulnerability in QTS and QuTS hero
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:N/I:N/A:C) | Jan 6, 2024 | Aug 4, 2025 | Oct 16, 2025 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
Jan 6, 2024
Added
Aug 4, 2025
Modified
Oct 16, 2025
Description
A prototype pollution vulnerability has been reported to affect certain QNAP operating system versions. If exploited, the vulnerability could allow remote users to override existing attributes with ones that have an incompatible type, which may cause the system to crash.
Solution
qnap-qts-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.