CVEvulnerability
CVE-2024-38639
4.8 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2026-09-18
- Last modified
- 2026-09-28
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.8 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
- Weaknesses
- CWE-287
Description
An improper authentication vulnerability has been reported to affect product. The remote attackers can then exploit the vulnerability to compromise the security of the system.
QTS is not affected.
We have already fixed the vulnerability in the following version:
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- https://www.qnap.com/en/security-advisory/qsa-24-37 www.qnap.com