Improper Authentication in QNAP Product Affecting Several Versions
CVE-2024-38639

4.8MEDIUM

Key Information:

Vendor

QNAP
Status
Qts
Vendor
CVE Published:
18 September 2026

What is CVE-2024-38639?

An improper authentication vulnerability has been identified in certain QNAP products, allowing remote attackers to exploit the flaw and potentially compromise system security. QTS is not affected by this issue, and the vulnerability has been addressed in newer versions. It is crucial for users to update their systems promptly to mitigate risks associated with this vulnerability.

Affected Version(s)

QTS ?

References

https://www.qnap.com/en/security-advisory/qsa-24-37

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

LuĂ­s Almeida Teles
.