CVE-2024-27123

UNKNOWN

Description

A cross-site scripting (XSS) vulnerability has been reported to affect QcalAgent. The local attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QcalAgent 1.1.9 and later

Timeline

Published:September 18th, 2026 7:16 AM

Last modified:September 28th, 2026 2:10 PM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-79

References & Reports

Advisories, patches, and third-party reports

https://www.qnap.com/en/security-advisory/qsa-24-54

Source: NIST NVD · Data may lag official sources by up to one minute