critical9.8
CVE-2026-22897
A command injection vulnerability has been reported to affect QuNetSwitch.
Impact
A command injection vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuNetSwitch 2.0.4.0415 and later
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qnap | Qunetswitch | from 2.0.1.13077 before 2.0.4.0415 |