vulnerability
QNAP QTS: CVE-2023-41281: Multiple Vulnerabilities in QTS, QuTS hero and QuTScloud
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:M/C:P/I:P/A:N) | Feb 3, 2024 | Aug 4, 2025 | Oct 16, 2025 |
Severity
5
CVSS
(AV:N/AC:L/Au:M/C:P/I:P/A:N)
Published
Feb 3, 2024
Added
Aug 4, 2025
Modified
Oct 16, 2025
Description
Multiple OS command injection vulnerabilities have been reported to affect certain QNAP operating system versions. If exploited, these vulnerabilities could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerabilities in the following versions:
Solution
qnap-qts-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.