Hard-Coded Credentials Vulnerability in QuNetSwitch by QNAP
CVE-2026-22900

6.8MEDIUM

Key Information:

Vendor

QNAP
Status
Qunetswitch
Vendor
CVE Published:
20 March 2026

What is CVE-2026-22900?

A vulnerability has been identified in QuNetSwitch, allowing remote attackers to exploit hard-coded credentials and gain unauthorized access to the system. This highlights the potential security risks associated with weak credential management practices. Users are encouraged to upgrade to QuNetSwitch version 2.0.5.0906 or later to mitigate the risks associated with this issue.

Affected Version(s)

QuNetSwitch 2.0.x < 2.0.5.0906

References

https://www.qnap.com/en/security-advisory/qsa-26-11

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

產品安全漏洞獵捕計劃 - YingMuo
.