GHSA-w5c8-52mf-vw3c
GitHub Security Advisory
⚠ Unreviewed
CRITICAL
Has CVE
Advisory Details
QNAP has patched a remote code execution vulnerability affecting the QTS Media Library in all versions prior to QTS 4.2.6 build 20170905 and QTS 4.3.3.0299 build 20170901. This particular vulnerability allows a remote attacker to execute commands on a QNAP NAS using a transcoding service on port 9251. A remote user does not require any privileges to successfully execute an attack.
Related CVEs
Key Information
9.0
/10
Dataset
Last updated: June 30, 2025 6:26 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.