Vulnerabilities

TI-2026-74705 CVE-2026-34009

QNAP Notes Station 3 improper isolation lets local admins compromise system

LOW 37

An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3.

CVSS 4.0HIGH 8.4 Local High privileges No interaction EPSS 0.00111 Published 2026-10-15 Fixed in 3.9.11 CWE-653

TI-2026-74704 CVE-2026-34008

LOW 37

An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00095 Published 2026-10-15 Fixed in 3.9.11 CWE-732

TI-2026-74703 CVE-2026-34007

LOW 39

An OS command injection vulnerability has been reported to affect Notes Station 3.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01446 Published 2026-10-15 Fixed in 3.9.11 CWE-78