https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-24719.htmlhttps://patchthecve.com/cve/CVE-2026-24719.htmlThu, 23 Jul 2026 09:10:00 +0000HIGH 7.2: A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.https://patchthecve.com/cve/CVE-2026-24717.htmlhttps://patchthecve.com/cve/CVE-2026-24717.htmlThu, 23 Jul 2026 09:10:00 +0000MEDIUM 6.5: A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the folhttps://patchthecve.com/cve/CVE-2026-24716.htmlhttps://patchthecve.com/cve/CVE-2026-24716.htmlThu, 23 Jul 2026 09:10:00 +0000HIGH 7.2: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the followhttps://patchthecve.com/cve/CVE-2026-22893.htmlhttps://patchthecve.com/cve/CVE-2026-22893.htmlThu, 23 Jul 2026 09:10:00 +0000HIGH 7.2: A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.https://patchthecve.com/cve/CVE-2025-66281.htmlhttps://patchthecve.com/cve/CVE-2025-66281.htmlThu, 23 Jul 2026 09:10:00 +0000HIGH 7.2: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3410 build 20https://patchthecve.com/cve/CVE-2025-66280.htmlhttps://patchthecve.com/cve/CVE-2025-66280.htmlThu, 23 Jul 2026 09:10:00 +0000HIGH 7.2: An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the fhttps://patchthecve.com/cve/CVE-2025-66279.htmlhttps://patchthecve.com/cve/CVE-2025-66279.htmlThu, 23 Jul 2026 09:10:00 +0000HIGH 7.2: A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.https://patchthecve.com/cve/CVE-2025-66273.htmlhttps://patchthecve.com/cve/CVE-2025-66273.htmlThu, 23 Jul 2026 09:10:00 +0000HIGH 7.2: A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.https://patchthecve.com/cve/CVE-2025-66276.htmlhttps://patchthecve.com/cve/CVE-2025-66276.htmlThu, 23 Jul 2026 09:10:00 +0000CRITICAL 9.8: QuTS hero is not affected. We have already fixed the vulnerability in the following version: QTS 5.2.7.3256 build 20250913 and later