DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
QNAP NAS: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-06-16
Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in QNAP NAS ausnutzen, um sich erhöhte Berechtigungen zu verschaffen, um Sicherheitsmechanismen zu umgehen, um einen Denial of Service Zustand herbeizuführen, um beliebige Befehle auszuführen, um Informationen offenzulegen oder nicht näher spezifizierte Auswirkungen zu erzielen.
01
beschreibt (14)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-26241US | critical9.1 | — | ||
A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processes.
We have al… | ||||
| CVE-2026-26240US | critical9.1 | — | ||
A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processes.
We have al… | ||||
| CVE-2026-26239US | high8.1 | — | ||
A buffer overflow vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or c… | ||||
| CVE-2026-24724US | high8.1OT erhöht | — | ||
An incorrect authorization vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass in… | ||||
| CVE-2026-24720US | medium6.5 | — | ||
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit t… | ||||
| CVE-2026-22899US | medium6.5 | — | ||
A NULL pointer dereference vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a… | ||||
| CVE-2026-22893US | high7.2 | — | ||
A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the… | ||||
| CVE-2025-66281US | high7.2 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to launch a den… | ||||
| CVE-2025-66280US | high7.2 | — | ||
An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can th… | ||||
| CVE-2025-66279US | high7.2 | — | ||
A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the… | ||||
| CVE-2025-66273US | high7.2 | — | ||
A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the… | ||||
| CVE-2025-59382US | — | Exploit | ||
QTS, QuTS hero, QuTScloud are not affected.
We have already fixed the vulnerability in the following version: | ||||
| CVE-2025-62858US | medium6.5 | — | ||
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the v… | ||||
| CVE-2025-68405US | — | — | ||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan