VulnSocial

CVE-2024-14026Disclosure(qnap / qts)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A command injection vulnerability has been reported to affect several QNAP operating system versions. If an attacker gains local network access who have also gained a user account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.1.9.2954 build 20241120 and later QTS 5.2.3.3006 build 20250108 and later QuTS hero h5.1.9.2954 build 20241120 and later QuTS hero h5.2.3.3006 build 20250108 and later

qnap CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • qts
  • quts_hero

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-03-11); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
qnap
Products
qtsquts_hero

48 versions affected across 2 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-03-11: 1Mentions · 2026-03-15: 1Technical Details · 2026-03-11: 1Technical Details · 2026-03-15: 103-1103-15
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2024-14026 A command injection vulnerability has been reported to affect several QNAP operating system versions. If an attacker gains local network access who have also gained a… https://www.cve.org/CVERecord?id=CVE-2024-14026

    Post summary

    The post announces CVE‑2024‑14026, a command‑injection flaw in selected QNAP OS versions that requires local network access, but gives no details on exploits, patches, or active exploitation.

    00000198
    56.7K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2024-14026 Local Command Injection Vulnerability in QNAP QTS and QuTS hero Versions https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-14026

    Post summary

    The post announces CVE-2024-14026 as a local command injection flaw in QNAP QTS and QuTS hero versions, providing a link to details on Vulmon.

    0000017
    4.0K followersView on X
CPE platform detail48 entries

48 of 48 entries

PartVendorProductVersionTarget SWTarget HW
OSqnapqts5.1.0.2348--
OSqnapqts5.1.0.2399--
OSqnapqts5.1.0.2418--
OSqnapqts5.1.0.2444--
OSqnapqts5.1.0.2466--
OSqnapqts5.1.1.2491--
OSqnapqts5.1.2.2533--
OSqnapqts5.1.3.2578--
OSqnapqts5.1.4.2596--
OSqnapqts5.1.5.2645--
OSqnapqts5.1.5.2679--
OSqnapqts5.1.6.2722--
OSqnapqts5.1.7.2770--
OSqnapqts5.1.8.2823--
OSqnapqts5.2.0.2737--
OSqnapqts5.2.0.2744--
OSqnapqts5.2.0.2782--
OSqnapqts5.2.0.2802--
OSqnapqts5.2.0.2823--
OSqnapqts5.2.0.2851--
OSqnapqts5.2.0.2860--
OSqnapqts5.2.1.2930--
OSqnapqts5.2.2.2950--
OSqnapquts_heroh5.1.0.2409--
OSqnapquts_heroh5.1.0.2424--
OSqnapquts_heroh5.1.0.2453--
OSqnapquts_heroh5.1.0.2466--
OSqnapquts_heroh5.1.1.2488--
OSqnapquts_heroh5.1.2.2534--
OSqnapquts_heroh5.1.3.2578--
OSqnapquts_heroh5.1.4.2596--
OSqnapquts_heroh5.1.5.2647--
OSqnapquts_heroh5.1.5.2680--
OSqnapquts_heroh5.1.6.2734--
OSqnapquts_heroh5.1.7.2770--
OSqnapquts_heroh5.1.7.2788--
OSqnapquts_heroh5.1.7.2794--
OSqnapquts_heroh5.1.8.2823--
OSqnapquts_heroh5.2.0.2737--
OSqnapquts_heroh5.2.0.2782--
OSqnapquts_heroh5.2.0.2789--
OSqnapquts_heroh5.2.0.2802--
OSqnapquts_heroh5.2.0.2823--
OSqnapquts_heroh5.2.0.2851--
OSqnapquts_heroh5.2.0.2860--
OSqnapquts_heroh5.2.1.2929--
OSqnapquts_heroh5.2.1.2940--
OSqnapquts_heroh5.2.2.2952--

Explore more

Back to dashboardqnap CVEsqts vulnerabilities