QNAP QTS: CVE-2024-56805: Multiple Vulnerabilities in QTS and QuTS hero

Multiple vulnerabilities have been reported to affect QTS and QuTS hero: CVE-2025-22481: Command injection vulnerability If a remote attacker gains access to a user account, they can then exploit the vulnerability to execute arbitrary commands. CVE-2024-56805: Buffer overflow vulnerability If a remote attacker gains access to a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerabilities in the following versions: