Read the docs
TI-2022-10583 Aliases CVE-2022-27596GHSA-xj35-32mv-jpmp

Vulnerability in QTS

Priority MEDIUM 54CWE-89Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
SQL injection
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-89.

Summary

A vulnerability has been reported to affect QNAP device running QuTS hero, QTS. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QuTS hero, QTS: QuTS hero h5.0.1.2248 build 20221215 and later QTS 5.0.1.2234 build 20221201 and later

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.02663 85th percentileScored 2026-11-07
Fix Fixed QuTS hero (QNAP Systems Inc.): h5.0.1.2248 build 20221215QTS (QNAP Systems Inc.): 5.0.1.2234 build 20221201

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
QNAPQuTS heroh5.0.1 to before h5.0.1.2248 build 20221215h5.0.1.2248 build 20221215Patch availableCNA
QNAPQTS5.0.1 to before 5.0.1.2234 build 202212015.0.1.2234 build 20221201Patch availableCNA
  • QuTS hero VendorQNAP Affected h5.0.1 to before h5.0.1.2248 build 20221215 Fixed in h5.0.1.2248 build 20221215 Patch available CNA
  • QTS VendorQNAP Affected 5.0.1 to before 5.0.1.2234 build 20221201 Fixed in 5.0.1.2234 build 20221201 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*5.0.1 to before 5.0.1.2234VulnerableQNAP
cpe:2.3:o:qnap:quts_hero:*:*:*:*:*:*:*:*h5.0.1 to before h5.0.1.2248VulnerableQNAP
  • cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:* Versions 5.0.1 to before 5.0.1.2234 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:quts_hero:*:*:*:*:*:*:*:* Versions h5.0.1 to before h5.0.1.2248 Vulnerable ·QNAP

Remediation

  • Fix · CNA QuTS hero (QNAP Systems Inc.) Fixed in h5.0.1.2248 build 20221215
  • Fix · CNA QTS (QNAP Systems Inc.) Fixed in 5.0.1.2234 build 20221201

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-27596
  2. 2026-10-03 Alias added: GHSA-xj35-32mv-jpmp

References

Advisory 1

  • TI-2020-02221 Command Injection Vulnerability in QTS and QuTS hero KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-05101 Improper input validation in QNAP NAS devices KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-14137 Improper input validation in QNAP QTS KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-14131 Cross-site scripting in QNAP QTS KEVCVSS 3.1HIGH 8.0
See all 282 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences