CVE-2026-22897 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A command injection vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to execute arbitrary commands…
High CVSS: 8.1

CVE-2026-22897

A command injection vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to execute arbitrary commands.

We have already fixed the vulnerability in the following version:
QuNetSwitch 2.0.4.0415 and later
Vendor
Qnap
Product
Qunetswitch
CWE
CWE-78
Yayın Tarihi
2026-03-20 17:16:44
Güncelleme
2026-03-25 21:06:25
Source Identifier
security@qnapsecurity.com.tw
KEV Date Added
-

Kategoriler

CWE-78 Qunetswitch HIGH Qnap 2026

Referanslar

https://www.qnap.com/en/security-advisory/qsa-26-11