CVE-2026-24719

QTS, QuTS hero

HIGH

7.2

CVSS Score

Published: June 10, 2026 at 03:14 AM UTC

Updated: July 23, 2026 at 07:32 PM UTC

2 products affected across 1 vendorQTSQuTS hero

Using QTS by QNAP Systems Inc.?

Get instant alerts when new vulnerabilities affect QTS - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.2

Exploit prediction

EPSS 1.0%

SSVC

No known exploit

Description

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3492 build 20260507 and later QuTS hero h5.2.9.3499 build 20260514 and later

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

QTS · Qnap

95%

5.2.0 ≤ v < 5.2.9.3492 build 202605075.2.0.2737 ≤ v < 5.2.9.34925.2.0

Affected range stops below 5.2.9.3492, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.2.9.3492 build 20260507, so it looks safe — our inference, not a vendor statement

QuTS hero · Qnap

95%

h5.0.0 ≤ v < h5.2.9.3499h5.2.0 ≤ v < h5.2.9.3499 build 20260514h5.2.0

Affected range stops below h5.2.9.3499, so it looks safe — our inference, not a vendor statement

Affected range stops below h5.2.9.3499 build 20260514, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (2)

Source: cverecord

https://www.qnap.com/en/security-advisory/qsa-26-23

Source: cverecord

https://www.qnap.com/en/security-advisory/qsa-26-10

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.2HIGH[email protected]

Attack Vector: NETWORK
Complexity: LOW
Privileges: HIGH
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: HIGH
Integrity: HIGH
Availability: HIGH

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-78

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card