Cross-site scripting in QNAP QTS
Priority LOW 29CWE-79Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Passive
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-79.
Summary
A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3492 build 20260507 and later QuTS hero h5.2.9.3499 build 20260514 and later QuTS hero h5.3.4.3500 build 20260520 and later QuTS hero h6.0.0.3500 build 20260520 and later
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00193 8th percentileScored 2026-11-07
Fix Fixed QTS (QNAP Systems Inc.): 5.2.9.3492 build 20260507QuTS hero (QNAP Systems Inc.): h5.2.9.3499 build 20260514, h5.3.4.3500 build 20260520, h6.0.0.3500 build 20260520
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| QNAP | QTS | 5.2.0 to before 5.2.9.3492 build 20260507 | 5.2.9.3492 build 20260507 | Patch available | CNA |
| QNAP | QuTS hero | h5.2.0 to before h5.2.9.3499 build 20260514; h5.3.0 to before h5.3.4.3500 build 20260520; ? to before h6.0.0.3500 build 20260520 | h5.2.9.3499 build 20260514, h5.3.4.3500 build 20260520, h6.0.0.3500 build 20260520 | Patch available | CNA |
- QTS VendorQNAP Affected 5.2.0 to before 5.2.9.3492 build 20260507 Fixed in 5.2.9.3492 build 20260507 Patch available CNA
- QuTS hero VendorQNAP Affected h5.2.0 to before h5.2.9.3499 build 20260514; h5.3.0 to before h5.3.4.3500 build 20260520; ? to before h6.0.0.3500 build 20260520 Fixed in h5.2.9.3499 build 20260514, h5.3.4.3500 build 20260520, h6.0.0.3500 build 20260520 Patch available CNA
CPE configurations NVD · 56
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:qnap:qts:5.2.0.2737:build_20240417:*:*:*:*:*:* | 5.2.0.2737 build_20240417 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.2.0.2744:build_20240424:*:*:*:*:*:* | 5.2.0.2744 build_20240424 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.2.0.2782:build_20240601:*:*:*:*:*:* | 5.2.0.2782 build_20240601 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.2.0.2802:build_20240620:*:*:*:*:*:* | 5.2.0.2802 build_20240620 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.2.0.2823:build_20240711:*:*:*:*:*:* | 5.2.0.2823 build_20240711 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.2.0.2851:build_20240808:*:*:*:*:*:* | 5.2.0.2851 build_20240808 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.2.0.2860:build_20240817:*:*:*:*:*:* | 5.2.0.2860 build_20240817 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.2.1.2930:build_20241025:*:*:*:*:*:* | 5.2.1.2930 build_20241025 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.2.2.2950:build_20241114:*:*:*:*:*:* | 5.2.2.2950 build_20241114 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.2.3.3006:build_20250108:*:*:*:*:*:* | 5.2.3.3006 build_20250108 | Vulnerable | QNAP |
- cpe:2.3:o:qnap:qts:5.2.0.2737:build_20240417:*:*:*:*:*:* Versions 5.2.0.2737 build_20240417 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.2.0.2744:build_20240424:*:*:*:*:*:* Versions 5.2.0.2744 build_20240424 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.2.0.2782:build_20240601:*:*:*:*:*:* Versions 5.2.0.2782 build_20240601 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.2.0.2802:build_20240620:*:*:*:*:*:* Versions 5.2.0.2802 build_20240620 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.2.0.2823:build_20240711:*:*:*:*:*:* Versions 5.2.0.2823 build_20240711 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.2.0.2851:build_20240808:*:*:*:*:*:* Versions 5.2.0.2851 build_20240808 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.2.0.2860:build_20240817:*:*:*:*:*:* Versions 5.2.0.2860 build_20240817 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.2.1.2930:build_20241025:*:*:*:*:*:* Versions 5.2.1.2930 build_20241025 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.2.2.2950:build_20241114:*:*:*:*:*:* Versions 5.2.2.2950 build_20241114 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.2.3.3006:build_20250108:*:*:*:*:*:* Versions 5.2.3.3006 build_20250108 Vulnerable ·QNAP
Show 46 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:qnap:qts:5.2.4.3070:build_20250312:*:*:*:*:*:* | 5.2.4.3070 build_20250312 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.2.4.3079:build_20250321:*:*:*:*:*:* | 5.2.4.3079 build_20250321 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.2.4.3092:build_20250403:*:*:*:*:*:* | 5.2.4.3092 build_20250403 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.2.5.3145:build_20250526:*:*:*:*:*:* | 5.2.5.3145 build_20250526 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.2.6.3195:build_20250715:*:*:*:*:*:* | 5.2.6.3195 build_20250715 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.2.6.3229:build_20250818:*:*:*:*:*:* | 5.2.6.3229 build_20250818 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.2.7.3256:build_20250913:*:*:*:*:*:* | 5.2.7.3256 build_20250913 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.2.7.3297:build_20251024:*:*:*:*:*:* | 5.2.7.3297 build_20251024 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.2.8.3332:build_20251128:*:*:*:*:*:* | 5.2.8.3332 build_20251128 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.2.8.3350:build_20251216:*:*:*:*:*:* | 5.2.8.3350 build_20251216 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.2.8.3359:build_20251225:*:*:*:*:*:* | 5.2.8.3359 build_20251225 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.2.9.3410:build_20260214:*:*:*:*:*:* | 5.2.9.3410 build_20260214 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.2.9.3451:build_20260327:*:*:*:*:*:* | 5.2.9.3451 build_20260327 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.2.0.2737:build_20240417:*:*:*:*:*:* | h5.2.0.2737 build_20240417 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.2.0.2782:build_20240601:*:*:*:*:*:* | h5.2.0.2782 build_20240601 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.2.0.2789:build_20240607:*:*:*:*:*:* | h5.2.0.2789 build_20240607 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.2.0.2802:build_20240620:*:*:*:*:*:* | h5.2.0.2802 build_20240620 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.2.0.2823:build_20240711:*:*:*:*:*:* | h5.2.0.2823 build_20240711 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.2.0.2851:build_20240808:*:*:*:*:*:* | h5.2.0.2851 build_20240808 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.2.0.2860:build_20240817:*:*:*:*:*:* | h5.2.0.2860 build_20240817 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.2.1.2929:build_20241025:*:*:*:*:*:* | h5.2.1.2929 build_20241025 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.2.1.2940:build_20241105:*:*:*:*:*:* | h5.2.1.2940 build_20241105 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.2.2.2952:build_20241116:*:*:*:*:*:* | h5.2.2.2952 build_20241116 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.2.3.3006:build_20250108:*:*:*:*:*:* | h5.2.3.3006 build_20250108 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.2.4.3070:build_20250312:*:*:*:*:*:* | h5.2.4.3070 build_20250312 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.2.4.3079:build_20250321:*:*:*:*:*:* | h5.2.4.3079 build_20250321 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.2.5.3138:build_20250519:*:*:*:*:*:* | h5.2.5.3138 build_20250519 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.2.6.3195:build_20250715:*:*:*:*:*:* | h5.2.6.3195 build_20250715 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.2.7.3256:build_20250913:*:*:*:*:*:* | h5.2.7.3256 build_20250913 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.2.7.3297:build_20251024:*:*:*:*:*:* | h5.2.7.3297 build_20251024 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.2.8.3321:build_20251117:*:*:*:*:*:* | h5.2.8.3321 build_20251117 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.2.8.3350:build_20251216:*:*:*:*:*:* | h5.2.8.3350 build_20251216 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.2.8.3359:build_20251225:*:*:*:*:*:* | h5.2.8.3359 build_20251225 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.2.9.3410:build_20260214:*:*:*:*:*:* | h5.2.9.3410 build_20260214 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.2.9.3492:build_20260507:*:*:*:*:*:* | h5.2.9.3492 build_20260507 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.3.0.3115:build_20250430:*:*:*:*:*:* | h5.3.0.3115 build_20250430 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.3.0.3145:build_20250530:*:*:*:*:*:* | h5.3.0.3145 build_20250530 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.3.0.3192:build_20250716:*:*:*:*:*:* | h5.3.0.3192 build_20250716 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.3.1.3250:build_20250912:*:*:*:*:*:* | h5.3.1.3250 build_20250912 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.3.1.3292:build_20251024:*:*:*:*:*:* | h5.3.1.3292 build_20251024 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.3.2.3354:build_20251225:*:*:*:*:*:* | h5.3.2.3354 build_20251225 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.3.3.3424:build_20260305:*:*:*:*:*:* | h5.3.3.3424 build_20260305 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h6.0.0.3324:build_20251125:*:*:*:*:*:* | h6.0.0.3324 build_20251125 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h6.0.0.3382:build_20260122:*:*:*:*:*:* | h6.0.0.3382 build_20260122 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h6.0.0.3397:build_20260206:*:*:*:*:*:* | h6.0.0.3397 build_20260206 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h6.0.0.3459:build_20260409:*:*:*:*:*:* | h6.0.0.3459 build_20260409 | Vulnerable | QNAP |
- cpe:2.3:o:qnap:qts:5.2.4.3070:build_20250312:*:*:*:*:*:* Versions 5.2.4.3070 build_20250312 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.2.4.3079:build_20250321:*:*:*:*:*:* Versions 5.2.4.3079 build_20250321 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.2.4.3092:build_20250403:*:*:*:*:*:* Versions 5.2.4.3092 build_20250403 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.2.5.3145:build_20250526:*:*:*:*:*:* Versions 5.2.5.3145 build_20250526 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.2.6.3195:build_20250715:*:*:*:*:*:* Versions 5.2.6.3195 build_20250715 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.2.6.3229:build_20250818:*:*:*:*:*:* Versions 5.2.6.3229 build_20250818 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.2.7.3256:build_20250913:*:*:*:*:*:* Versions 5.2.7.3256 build_20250913 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.2.7.3297:build_20251024:*:*:*:*:*:* Versions 5.2.7.3297 build_20251024 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.2.8.3332:build_20251128:*:*:*:*:*:* Versions 5.2.8.3332 build_20251128 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.2.8.3350:build_20251216:*:*:*:*:*:* Versions 5.2.8.3350 build_20251216 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.2.8.3359:build_20251225:*:*:*:*:*:* Versions 5.2.8.3359 build_20251225 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.2.9.3410:build_20260214:*:*:*:*:*:* Versions 5.2.9.3410 build_20260214 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.2.9.3451:build_20260327:*:*:*:*:*:* Versions 5.2.9.3451 build_20260327 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.2.0.2737:build_20240417:*:*:*:*:*:* Versions h5.2.0.2737 build_20240417 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.2.0.2782:build_20240601:*:*:*:*:*:* Versions h5.2.0.2782 build_20240601 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.2.0.2789:build_20240607:*:*:*:*:*:* Versions h5.2.0.2789 build_20240607 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.2.0.2802:build_20240620:*:*:*:*:*:* Versions h5.2.0.2802 build_20240620 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.2.0.2823:build_20240711:*:*:*:*:*:* Versions h5.2.0.2823 build_20240711 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.2.0.2851:build_20240808:*:*:*:*:*:* Versions h5.2.0.2851 build_20240808 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.2.0.2860:build_20240817:*:*:*:*:*:* Versions h5.2.0.2860 build_20240817 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.2.1.2929:build_20241025:*:*:*:*:*:* Versions h5.2.1.2929 build_20241025 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.2.1.2940:build_20241105:*:*:*:*:*:* Versions h5.2.1.2940 build_20241105 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.2.2.2952:build_20241116:*:*:*:*:*:* Versions h5.2.2.2952 build_20241116 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.2.3.3006:build_20250108:*:*:*:*:*:* Versions h5.2.3.3006 build_20250108 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.2.4.3070:build_20250312:*:*:*:*:*:* Versions h5.2.4.3070 build_20250312 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.2.4.3079:build_20250321:*:*:*:*:*:* Versions h5.2.4.3079 build_20250321 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.2.5.3138:build_20250519:*:*:*:*:*:* Versions h5.2.5.3138 build_20250519 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.2.6.3195:build_20250715:*:*:*:*:*:* Versions h5.2.6.3195 build_20250715 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.2.7.3256:build_20250913:*:*:*:*:*:* Versions h5.2.7.3256 build_20250913 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.2.7.3297:build_20251024:*:*:*:*:*:* Versions h5.2.7.3297 build_20251024 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.2.8.3321:build_20251117:*:*:*:*:*:* Versions h5.2.8.3321 build_20251117 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.2.8.3350:build_20251216:*:*:*:*:*:* Versions h5.2.8.3350 build_20251216 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.2.8.3359:build_20251225:*:*:*:*:*:* Versions h5.2.8.3359 build_20251225 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.2.9.3410:build_20260214:*:*:*:*:*:* Versions h5.2.9.3410 build_20260214 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.2.9.3492:build_20260507:*:*:*:*:*:* Versions h5.2.9.3492 build_20260507 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.3.0.3115:build_20250430:*:*:*:*:*:* Versions h5.3.0.3115 build_20250430 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.3.0.3145:build_20250530:*:*:*:*:*:* Versions h5.3.0.3145 build_20250530 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.3.0.3192:build_20250716:*:*:*:*:*:* Versions h5.3.0.3192 build_20250716 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.3.1.3250:build_20250912:*:*:*:*:*:* Versions h5.3.1.3250 build_20250912 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.3.1.3292:build_20251024:*:*:*:*:*:* Versions h5.3.1.3292 build_20251024 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.3.2.3354:build_20251225:*:*:*:*:*:* Versions h5.3.2.3354 build_20251225 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.3.3.3424:build_20260305:*:*:*:*:*:* Versions h5.3.3.3424 build_20260305 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h6.0.0.3324:build_20251125:*:*:*:*:*:* Versions h6.0.0.3324 build_20251125 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h6.0.0.3382:build_20260122:*:*:*:*:*:* Versions h6.0.0.3382 build_20260122 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h6.0.0.3397:build_20260206:*:*:*:*:*:* Versions h6.0.0.3397 build_20260206 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h6.0.0.3459:build_20260409:*:*:*:*:*:* Versions h6.0.0.3459 build_20260409 Vulnerable ·QNAP
Remediation
- Fix · CNA QTS (QNAP Systems Inc.) Fixed in 5.2.9.3492 build 20260507
- Fix · CNA QuTS hero (QNAP Systems Inc.) Fixed in h5.2.9.3499 build 20260514, h5.3.4.3500 build 20260520, h6.0.0.3500 build 20260520
Timeline
- 2026-10-02 Threatist record created from CVE-2026-41539
- 2026-10-03 Alias added: GHSA-hc5c-8r54-29r3
References
More QNAP Qts vulnerabilities
- TI-2020-02221 Command Injection Vulnerability in QTS and QuTS hero KEVCVSS 3.1CRITICAL 9.8
- TI-2019-05101 Improper input validation in QNAP NAS devices KEVCVSS 3.1CRITICAL 9.8
- TI-2018-14137 Improper input validation in QNAP QTS KEVCVSS 3.1CRITICAL 9.8
- TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
- TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
- TI-2018-14131 Cross-site scripting in QNAP QTS KEVCVSS 3.1HIGH 8.0
Sources
- CVE-2026-41539 · CVE Program
- CVE-2026-41539 · NVD
- FIRST EPSS
- GHSA-hc5c-8r54-29r3 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences