Qunetswitch (Qnap Systems Inc.) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-03-20. Vendor: Qnap Systems Inc..

CVEs of Qunetswitch

• CVE-2026-22897 - CVSS 9.8 (critical), 2026-03-20: A command injection vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to execute arbitrary…
• CVE-2026-22902 - CVSS 6.7 (medium), 2026-03-20: A command injection vulnerability has been reported to affect QuNetSwitch. If a local attacker gains an administrator account, they can then exploit the…
• CVE-2026-22901 - CVSS 9.8 (critical), 2026-03-20: A command injection vulnerability has been reported to affect QuNetSwitch. If a remote attacker gains a user account, they can then exploit the vulnerability…
• CVE-2026-22900 - CVSS 9.8 (critical), 2026-03-20: A use of hard-coded credentials vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to gain…
• CVE-2021-28813 - CVSS 9.6 (critical), 2021-09-10: A vulnerability involving insecure storage of sensitive information has been reported to affect QSW-M2116P-2T2S and QNAP switches running QuNetSwitch. If…