CVE-2024-38639

MEDIUMCVSS 4.8

Description

An improper authentication vulnerability has been reported to affect product. The remote attackers can then exploit the vulnerability to compromise the security of the system. QTS is not affected. We have already fixed the vulnerability in the following version:

Timeline

Published:September 18th, 2026 7:16 AM

Last modified:September 28th, 2026 2:10 PM

CVSS Scoring

CVSS v3: 4.8 (MEDIUM)

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

Weaknesses (CWE)

CWE-287

References & Reports

Advisories, patches, and third-party reports

https://www.qnap.com/en/security-advisory/qsa-24-37

Source: NIST NVD · Data may lag official sources by up to one minute