CVE-2026-22902 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A command injection vulnerability has been reported to affect QuNetSwitch. If a local attacker gains an administrator account, they can then exploit the vulnera…
Medium CVSS: 5.7

CVE-2026-22902

A command injection vulnerability has been reported to affect QuNetSwitch. If a local attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands.

We have already fixed the vulnerability in the following version:
QuNetSwitch 2.0.5.0906 and later
Vendor
Qnap
Product
Qunetswitch
CWE
CWE-78
Yayın Tarihi
2026-03-20 17:16:44
Güncelleme
2026-03-25 20:50:13
Source Identifier
security@qnapsecurity.com.tw
KEV Date Added
-

Kategoriler

CWE-78 Qunetswitch MEDIUM Qnap 2026

Referanslar

https://www.qnap.com/en/security-advisory/qsa-26-11