CVE-2024-14026

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2024-14026", "assignerOrgId": "2fd009eb-170a-4625-932b-17a53af1051f", "state": "PUBLISHED", "assignerShortName": "qnap", "dateReserved": "2026-03-09T01:19:53.496Z", "datePublished": "2026-03-11T08:02:13.413Z", "dateUpdated": "2026-03-12T03:55:17.771Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "2fd009eb-170a-4625-932b-17a53af1051f", "shortName": "qnap", "dateUpdated": "2026-03-11T08:07:06.833Z"}, "title": "QTS, QuTS hero", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-78", "description": "CWE-78", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88"}]}], "affected": [{"vendor": "QNAP Systems Inc.", "product": "QTS", "versions": [{"status": "affected", "version": "5.1.x", "lessThan": "5.1.9.2954 build 20241120", "versionType": "custom"}, {"status": "affected", "version": "5.2.x", "lessThan": "5.2.3.3006 build 20250108", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "QNAP Systems Inc.", "product": "QuTS hero", "versions": [{"status": "affected", "version": "h5.1.x", "lessThan": "h5.1.9.2954 build 20241120", "versionType": "custom"}, {"status": "affected", "version": "h5.2.x", "lessThan": "h5.2.3.3006 build 20250108", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "A command injection vulnerability has been reported to affect several QNAP operating system versions. If an attacker gains local network access who have also gained a user account, they can then exploit the vulnerability to execute arbitrary commands.\n\nWe have already fixed the vulnerability in the following versions:\nQTS 5.1.9.2954 build 20241120 and later\nQTS 5.2.3.3006 build 20250108 and later\nQuTS hero h5.1.9.2954 build 20241120 and later\nQuTS hero h5.2.3.3006 build 20250108 and later", "supportingMedia": [{"type": "text/html", "base64": false, "value": "A command injection vulnerability has been reported to affect several QNAP operating system versions. If an attacker gains local network access who have also gained a user account, they can then exploit the vulnerability to execute arbitrary commands.<br><br>We have already fixed the vulnerability in the following versions:<br>QTS 5.1.9.2954 build 20241120 and later<br>QTS 5.2.3.3006 build 20250108 and later<br>QuTS hero h5.1.9.2954 build 20241120 and later<br>QuTS hero h5.2.3.3006 build 20250108 and later<br>"}]}], "references": [{"url": "https://www.qnap.com/en/security-advisory/qsa-24-54"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "PHYSICAL", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "userInteraction": "ACTIVE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "UNREPORTED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "LOW", "baseScore": 2, "vectorString": "CVSS:4.0/AV:P/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U"}}], "solutions": [{"lang": "en", "value": "We have already fixed the vulnerability in the following versions:\nQTS 5.1.9.2954 build 20241120 and later\nQTS 5.2.3.3006 build 20250108 and later\nQuTS hero h5.1.9.2954 build 20241120 and later\nQuTS hero h5.2.3.3006 build 20250108 and later", "supportingMedia": [{"type": "text/html", "base64": false, "value": "We have already fixed the vulnerability in the following versions:<br>QTS 5.1.9.2954 build 20241120 and later<br>QTS 5.2.3.3006 build 20250108 and later<br>QuTS hero h5.1.9.2954 build 20241120 and later<br>QuTS hero h5.2.3.3006 build 20250108 and later<br>"}]}], "source": {"advisory": "QSA-24-57", "discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-11T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2024-14026"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-12T03:55:17.771Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-14026", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-03-11T13:51:43.059660Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-11T13:51:47.929Z"}}], "cna": {"title": "QTS, QuTS hero", "source": {"advisory": "QSA-24-57", "discovery": "EXTERNAL"}, "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 2, "Automatable": "NOT_DEFINED", "attackVector": "PHYSICAL", "baseSeverity": "LOW", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:P/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U", "exploitMaturity": "UNREPORTED", "providerUrgency": "NOT_DEFINED", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "QNAP Systems Inc.", "product": "QTS", "versions": [{"status": "affected", "version": "5.1.x", "lessThan": "5.1.9.2954 build 20241120", "versionType": "custom"}, {"status": "affected", "version": "5.2.x", "lessThan": "5.2.3.3006 build 20250108", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "QNAP Systems Inc.", "product": "QuTS hero", "versions": [{"status": "affected", "version": "h5.1.x", "lessThan": "h5.1.9.2954 build 20241120", "versionType": "custom"}, {"status": "affected", "version": "h5.2.x", "lessThan": "h5.2.3.3006 build 20250108", "versionType": "custom"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "We have already fixed the vulnerability in the following versions:\nQTS 5.1.9.2954 build 20241120 and later\nQTS 5.2.3.3006 build 20250108 and later\nQuTS hero h5.1.9.2954 build 20241120 and later\nQuTS hero h5.2.3.3006 build 20250108 and later", "supportingMedia": [{"type": "text/html", "value": "We have already fixed the vulnerability in the following versions:<br>QTS 5.1.9.2954 build 20241120 and later<br>QTS 5.2.3.3006 build 20250108 and later<br>QuTS hero h5.1.9.2954 build 20241120 and later<br>QuTS hero h5.2.3.3006 build 20250108 and later<br>", "base64": false}]}], "references": [{"url": "https://www.qnap.com/en/security-advisory/qsa-24-54"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "A command injection vulnerability has been reported to affect several QNAP operating system versions. If an attacker gains local network access who have also gained a user account, they can then exploit the vulnerability to execute arbitrary commands.\n\nWe have already fixed the vulnerability in the following versions:\nQTS 5.1.9.2954 build 20241120 and later\nQTS 5.2.3.3006 build 20250108 and later\nQuTS hero h5.1.9.2954 build 20241120 and later\nQuTS hero h5.2.3.3006 build 20250108 and later", "supportingMedia": [{"type": "text/html", "value": "A command injection vulnerability has been reported to affect several QNAP operating system versions. If an attacker gains local network access who have also gained a user account, they can then exploit the vulnerability to execute arbitrary commands.<br><br>We have already fixed the vulnerability in the following versions:<br>QTS 5.1.9.2954 build 20241120 and later<br>QTS 5.2.3.3006 build 20250108 and later<br>QuTS hero h5.1.9.2954 build 20241120 and later<br>QuTS hero h5.2.3.3006 build 20250108 and later<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-78", "description": "CWE-78"}]}], "providerMetadata": {"orgId": "2fd009eb-170a-4625-932b-17a53af1051f", "shortName": "qnap", "dateUpdated": "2026-03-11T08:07:06.833Z"}}}, "cveMetadata": {"cveId": "CVE-2024-14026", "state": "PUBLISHED", "dateUpdated": "2026-03-12T03:55:17.771Z", "dateReserved": "2026-03-09T01:19:53.496Z", "assignerOrgId": "2fd009eb-170a-4625-932b-17a53af1051f", "datePublished": "2026-03-11T08:02:13.413Z", "assignerShortName": "qnap"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "QTS", "vendor": "QNAP Systems Inc.", "versions": [{"lessThan": "5.1.9.2954 build 20241120", "status": "affected", "version": "5.1.x", "versionType": "custom"}, {"lessThan": "5.2.3.3006 build 20250108", "status": "affected", "version": "5.2.x", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "QuTS hero", "vendor": "QNAP Systems Inc.", "versions": [{"lessThan": "h5.1.9.2954 build 20241120", "status": "affected", "version": "h5.1.x", "versionType": "custom"}, {"lessThan": "h5.2.3.3006 build 20250108", "status": "affected", "version": "h5.2.x", "versionType": "custom"}]}], "source": "security@qnapsecurity.com.tw"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qnap:qts:5.1.0.2348:build_20230325:*:*:*:*:*:*", "matchCriteriaId": "39382CBA-EA68-426A-AC07-A9A26E722CAB", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:5.1.0.2399:build_20230515:*:*:*:*:*:*", "matchCriteriaId": "BCB37C08-1DF7-4AF4-9BB1-C562E5643B5A", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:5.1.0.2418:build_20230603:*:*:*:*:*:*", "matchCriteriaId": "8368130C-F26D-41FE-8D78-B103A23B5327", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:5.1.0.2444:build_20230629:*:*:*:*:*:*", "matchCriteriaId": "3E0EE181-78AF-4C3C-90A4-C69A2DE6E176", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:5.1.0.2466:build_20230721:*:*:*:*:*:*", "matchCriteriaId": "56E3AE06-78DA-4844-ADC1-09A35F1C5B54", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:5.1.1.2491:build_20230815:*:*:*:*:*:*", "matchCriteriaId": "D2AA7A32-0DA8-4417-A23E-C4F563BC7819", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:5.1.2.2533:build_20230926:*:*:*:*:*:*", "matchCriteriaId": "80E7C17C-ED6D-439D-A1F3-1870A3ADA926", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:5.1.3.2578:build_20231110:*:*:*:*:*:*", "matchCriteriaId": "636C2D9C-C837-4FAC-B79D-1CA7A7C1FF3E", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:5.1.4.2596:build_20231128:*:*:*:*:*:*", "matchCriteriaId": "866B455B-0266-4990-920B-A06756ED5A61", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:5.1.5.2645:build_20240116:*:*:*:*:*:*", "matchCriteriaId": "B3B5C4C5-5EE2-4E6F-927E-1D52A04895BB", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:5.1.5.2679:build_20240219:*:*:*:*:*:*", "matchCriteriaId": "543E17BB-B552-4B65-B028-BE9A47E6F34B", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:5.1.6.2722:build_20240402:*:*:*:*:*:*", "matchCriteriaId": "EEDC247A-96D9-4140-AA72-52E4EEDC2121", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:5.1.7.2770:build_20240520:*:*:*:*:*:*", "matchCriteriaId": "DDEF21B3-275E-446B-A6C4-FD30A567B600", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:5.1.8.2823:build_20240712:*:*:*:*:*:*", "matchCriteriaId": "4A0C7EC7-A0A4-4100-927A-0D673F784502", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:5.2.0.2737:build_20240417:*:*:*:*:*:*", "matchCriteriaId": "F4026A4B-7AB4-48EA-971D-88DFDD3F01A7", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:5.2.0.2744:build_20240424:*:*:*:*:*:*", "matchCriteriaId": "1F3F99BB-0D68-4D74-92C8-59E24F96C50D", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:5.2.0.2782:build_20240601:*:*:*:*:*:*", "matchCriteriaId": "1DE63B4D-8E84-41D3-B1F3-04AE6040242B", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:5.2.0.2802:build_20240620:*:*:*:*:*:*", "matchCriteriaId": "75746563-C648-4E55-9126-703F915F8B8A", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:5.2.0.2823:build_20240711:*:*:*:*:*:*", "matchCriteriaId": "AF6BA027-A635-4E90-80C8-130B10AB3D23", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:5.2.0.2851:build_20240808:*:*:*:*:*:*", "matchCriteriaId": "5406F242-A215-4B07-809F-7A7CE55ACE71", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:5.2.0.2860:build_20240817:*:*:*:*:*:*", "matchCriteriaId": "FA17778E-B3B1-44DD-B4E9-5AD25A3E804C", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:5.2.1.2930:build_20241025:*:*:*:*:*:*", "matchCriteriaId": "E3FC6646-2247-4ED9-9643-CD376674E2E7", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:5.2.2.2950:build_20241114:*:*:*:*:*:*", "matchCriteriaId": "62170342-067D-442C-88FB-64A4BEA8AFE4", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qnap:quts_hero:h5.1.0.2409:build_20230525:*:*:*:*:*:*", "matchCriteriaId": "6CA398A8-EBDF-4D41-B15E-7B763F885021", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.1.0.2424:build_20230609:*:*:*:*:*:*", "matchCriteriaId": "F63A5ED2-ECC2-49A0-BFA9-548E35ACD6C7", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.1.0.2453:build_20230708:*:*:*:*:*:*", "matchCriteriaId": "53387FAC-7BE0-47D7-99BF-2B1F03C17CC3", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.1.0.2466:build_20230721:*:*:*:*:*:*", "matchCriteriaId": "D4226394-0023-4CD2-BB89-77251BF92FF3", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.1.1.2488:build_20230812:*:*:*:*:*:*", "matchCriteriaId": "646257F7-D4A4-43B0-91F2-7850338B3CA1", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.1.2.2534:build_20230927:*:*:*:*:*:*", "matchCriteriaId": "88825AE1-B006-4F7F-BD90-D4B1CF1251A3", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.1.3.2578:build_20231110:*:*:*:*:*:*", "matchCriteriaId": "3F471666-4919-4770-956E-ACE4C55D29DB", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.1.4.2596:build_20231128:*:*:*:*:*:*", "matchCriteriaId": "9573F671-D49E-438A-B72C-DFC390A79093", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.1.5.2647:build_20240118:*:*:*:*:*:*", "matchCriteriaId": "75E7938F-943F-428D-974D-42E790829F88", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.1.5.2680:build_20240220:*:*:*:*:*:*", "matchCriteriaId": "12F5732D-C95F-45D1-968C-C2269DFDF6D4", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.1.6.2734:build_20240414:*:*:*:*:*:*", "matchCriteriaId": "94734596-A56A-4128-A39A-7E22FBD17835", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.1.7.2770:build_20240520:*:*:*:*:*:*", "matchCriteriaId": "ACF87C5E-9508-4BA9-9218-3CBD8A8439A4", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.1.7.2788:build_20240607:*:*:*:*:*:*", "matchCriteriaId": "67E8977A-2363-4855-B284-6EBF8FB485A2", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.1.7.2794:build_20240613:*:*:*:*:*:*", "matchCriteriaId": "3A268686-341F-4E13-8CE6-493DE7E9CF70", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.1.8.2823:build_20240712:*:*:*:*:*:*", "matchCriteriaId": "D57D3028-1713-4530-A1EC-6D13A0E010C3", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.2.0.2737:build_20240417:*:*:*:*:*:*", "matchCriteriaId": "CDCBB36A-CB91-4BA3-A6ED-952E6A4A0481", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.2.0.2782:build_20240601:*:*:*:*:*:*", "matchCriteriaId": "240BCFF1-CCCB-4C07-8E2C-7F43F68407FC", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.2.0.2789:build_20240607:*:*:*:*:*:*", "matchCriteriaId": "D3AF7276-77E0-474A-B10F-AC15BC5FCF00", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.2.0.2802:build_20240620:*:*:*:*:*:*", "matchCriteriaId": "5FA8C3EC-B6C0-44A8-BC91-18E3E90C63AB", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.2.0.2823:build_20240711:*:*:*:*:*:*", "matchCriteriaId": "889336D2-D9F7-4CC0-A22F-B837B5E77751", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.2.0.2851:build_20240808:*:*:*:*:*:*", "matchCriteriaId": "98F72EB9-0EE3-416A-B9BB-2512F5203A5A", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.2.0.2860:build_20240817:*:*:*:*:*:*", "matchCriteriaId": "9110382F-57C2-4C2E-82D1-3246C882B2C3", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.2.1.2929:build_20241025:*:*:*:*:*:*", "matchCriteriaId": "DB92EFD7-47DD-4AAC-97BD-A2D4918FF4ED", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.2.1.2940:build_20241105:*:*:*:*:*:*", "matchCriteriaId": "78E38E23-1AD0-49E1-89FA-73DC2F496137", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:quts_hero:h5.2.2.2952:build_20241116:*:*:*:*:*:*", "matchCriteriaId": "F2F302B6-26CC-4044-B480-4EBDBB90797F", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A command injection vulnerability has been reported to affect several QNAP operating system versions. If an attacker gains local network access who have also gained a user account, they can then exploit the vulnerability to execute arbitrary commands.\n\nWe have already fixed the vulnerability in the following versions:\nQTS 5.1.9.2954 build 20241120 and later\nQTS 5.2.3.3006 build 20250108 and later\nQuTS hero h5.1.9.2954 build 20241120 and later\nQuTS hero h5.2.3.3006 build 20250108 and later"}, {"lang": "es", "value": "Una vulnerabilidad de inyecci\u00f3n de comandos ha sido reportada que afecta a varias versiones del sistema operativo QNAP. Si un atacante obtiene acceso a la red local y tambi\u00e9n ha obtenido una cuenta de usuario, puede entonces explotar la vulnerabilidad para ejecutar comandos arbitrarios.\n\nYa hemos corregido la vulnerabilidad en las siguientes versiones:\nQTS 5.1.9.2954 build 20241120 y posteriores\nQTS 5.2.3.3006 build 20250108 y posteriores\nQuTS hero h5.1.9.2954 build 20241120 y posteriores\nQuTS hero h5.2.3.3006 build 20250108 y posteriores"}], "id": "CVE-2024-14026", "lastModified": "2026-06-17T07:03:10.830", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "PHYSICAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.0, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "UNREPORTED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:P/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security@qnapsecurity.com.tw", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-14026", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-03-11T00:00:00+00:00", "version": "2.0.3"}}]}, "published": "2026-03-11T08:16:02.923", "references": [{"source": "security@qnapsecurity.com.tw", "tags": ["Vendor Advisory"], "url": "https://www.qnap.com/en/security-advisory/qsa-24-54"}], "sourceIdentifier": "security@qnapsecurity.com.tw", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "security@qnapsecurity.com.tw", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.1.x,5.1.9.2954 build 20241120)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.2.x,5.2.3.3006 build 20250108)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "QTS", "source": "cna", "vendor": "QNAP Systems Inc."}, "product": "qts", "vendor": "qnap_systems"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[h5.1.x,h5.1.9.2954 build 20241120)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[h5.2.x,h5.2.3.3006 build 20250108)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "QuTS hero", "source": "cna", "vendor": "QNAP Systems Inc."}, "product": "quts_hero", "vendor": "qnap_systems"}], "analysis": {"en": {"generated_at": "2026-03-17T14:44:47.538285+00:00", "value": {"mitigation_remediation": ["Upgrade QTS to build\u202f20241120 or later (for QTS\u202f5.1.x) or build\u202f20250108 or later (for QTS\u202f5.2.x) as indicated in the QNAP advisory.", "Upgrade QuTS hero to build\u202f20241120 or later (for h5.1.x) or build\u202f20250108 or later (for h5.2.x) as indicated in the QNAP advisory.", "Verify the firmware version displayed in the NAS management interface matches the patched build numbers.", "If a firmware upgrade is not yet available, restrict local network access to the NAS and apply network segmentation to limit the attack surface.", "Monitor system logs for unexpected command executions or privilege escalation attempts."], "summary": {"action": "Patch Now", "impact": "Local Command Execution"}, "threat_synthesis": {"affected_systems": "The vulnerability affects QNAP Systems Inc. QTS and QuTS hero firmware versions prior to the patches listed in the vendor advisory. Specifically, QTS firmware earlier than build\u202f20241120 (versions up to QTS\u202f5.1.9.2954) and earlier than build\u202f20250108 (versions up to QTS\u202f5.2.3.3006) are vulnerable, as are QuTS hero firmware before build\u202f20241120 (versions up to h5.1.9.2954) and before build\u202f20250108 (versions up to h5.2.3.3006). The extensive list of cpe strings confirms that multiple sub\u2011versions across the 5.1.x, 5.2.x, h5.1.x, and h5.2.x lines are affected.", "description_and_impact": "A command injection vulnerability (CWE\u201178) is present in the QNAP operating system for QTS and QuTS hero. An attacker who has local network access and a valid user account can supply specially crafted input that is passed to the system shell, enabling the execution of arbitrary operating\u2011system commands. This allows the attacker to compromise the integrity and availability of the NAS device, potentially installing malware, modifying configuration files, or exfiltrating data.", "risk_and_exploitability": "Because an attacker must already possess local network credentials to exploit the flaw, the attack vector is classified as local (L). The CVSS score of 2.0 indicates low severity, and the EPSS score of less than 1\u202f% suggests a low likelihood of exploitation in the wild. This vulnerability is not currently listed in the CISA KEV catalog. Nevertheless, any enabled feature that accepts user\u2011controlled input without proper sanitisation can be abused by a malicious local user, so remediation is recommended as a precaution."}}}}, "created": "2026-03-12T10:06:12.403825+00:00", "title": "Command Injection Vulnerability in QNAP QTS and QuTS hero Allowing Local User to Execute Arbitrary Commands", "updated": "2026-03-20T14:37:33.258208+00:00", "vendors": ["qnap_systems", "qnap_systems$PRODUCT$qts", "qnap_systems$PRODUCT$quts_hero"]}