QNAP QTS 4.2.6 Build 20220304
Approved changes feed: RSS · Atom
cpe:2.3:o:qnap:qts:4.2.6:build_20220304:*:*:*:*:*:*
part: o version: 4.2.6 update: build_20220304
| Vendor | Qnap (a402dda4-b7da-50eb-b0f8-700e564ee87d) |
|---|---|
| Product | Qts (9004baf2-b431-53ba-b074-38fcdcfcd981) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-50358 |
vulnerable | 2026-06-08 06:16:16.003495 |
QTS, QuTS hero, QuTScloud
MEDIUM (5.8)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.5.2645 build 20240116 and later
QTS 4.5.4.2627 build 20231225 and later
QTS 4.3.6.2665 build 20240131 and later
QTS 4.3.4.2675 build 20240131 and later
QTS 4.3.3.2644 build 20240131 and later
QTS 4.2.6 build 20240131 and later
QuTS hero h5.1.5.2647 build 20240118 and later
QuTS hero h4.5.4.2626 build 20231225 and later
QuTScloud c5.1.5.2651 and later
Published: 2024-02-13T02:45:22.351Z
Updated: 2025-05-09T18:16:31.828Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39300 |
vulnerable | 2026-06-08 06:09:36.981287 |
QTS
HIGH (7.2)
An OS command injection vulnerability has been reported to affect legacy QTS. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QTS 4.3.6.2805 build 20240619 and later
QTS 4.3.4.2814 build 20240618 and later
QTS 4.3.3.2784 build 20240619 and later
QTS 4.2.6 build 20240618 and later
Published: 2024-09-06T16:27:04.275Z
Updated: 2024-09-06T17:44:00.200Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23369 |
vulnerable | 2026-06-08 05:54:28.247911 |
QTS, Multimedia Console, and Media Streaming add-on
CRITICAL (9)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network.
We have already fixed the vulnerability in the following versions:
Multimedia Console 2.1.2 ( 2023/05/04 ) and later
Multimedia Console 1.4.8 ( 2023/05/05 ) and later
QTS 5.1.0.2399 build 20230515 and later
QTS 4.3.6.2441 build 20230621 and later
QTS 4.3.4.2451 build 20230621 and later
QTS 4.3.3.2420 build 20230621 and later
QTS 4.2.6 build 20230621 and later
Media Streaming add-on 500.1.1.2 ( 2023/06/12 ) and later
Media Streaming add-on 500.0.0.11 ( 2023/06/16 ) and later
Published: 2023-11-03T16:34:40.084Z
Updated: 2025-02-27T20:34:32.639Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.