CVE-2026-24719 – QTS, QuTS hero

CVE ID :CVE-2026-24719

Published : June 10, 2026, 4:17 a.m. | 20 minutes ago

Description :A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands.

We have already fixed the vulnerability in the following versions:
QTS 5.2.9.3492 build 20260507 and later
QuTS hero h5.2.9.3499 build 20260514 and later

Severity: 8.6 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…