CVE-2026-22896

Stored XSS via Interface Name in Network & Virtual Switch App

Published Oct 15, 2026 CVSS 4.0 · 6.2 Medium EPSS < 1% KEV · Not listed

Description

A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch. If a remote attacker gains an administrator account, they can then exploit the vulnerability to inject malicious code.

We have already fixed the vulnerability in the following version:
Network & Virtual Switch in QTS 5.1.8.2823 build 20240712 and later
Network & Virtual Switch in QTS 5.2.1.2930 build 20241025 and later
Network & Virtual Switch in QuTS cloud c5.2.4.3041 build 20250211 and later
Network & Virtual Switch in QuTS hero h5.1.8.2823 build 20240712 and later
Network & Virtual Switch in QuTS hero h5.2.1.2929 build 20241025 and later

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

QNAP Systems Inc.

Network & Virtual Switch

unaffected

Version	Status	Constraints
`QTS 5.1.x`	affected	< QTS 5.1.8.2823 build 20240712
`QTS 5.2.x`	affected	< QTS 5.2.1.2930 build 20241025
`QuTS cloud c5.2.x`	affected	< QuTS cloud c5.2.4.3041 build 20250211
`QuTS hero h5.1.x`	affected	< QuTS hero h5.1.8.2823 build 20240712
`QuTS hero h5.2.x`	affected	< QuTS hero h5.2.1.2929 build 20241025

No data.

Vendor Product Versions

Qnap Systems

Network & Virtual Switch

Version	Status	Scheme	Platform
`[QTS 5.1.x,QTS 5.1.8.2823 build 20240712)`	affected	generic	—
`[QTS 5.2.x,QTS 5.2.1.2930 build 20241025)`	affected	generic	—
`[QuTS cloud c5.2.x,QuTS cloud c5.2.4.3041 build 20250211)`	affected	generic	—
`[QuTS hero h5.1.x,QuTS hero h5.1.8.2823 build 20240712)`	affected	generic	—
`[QuTS hero h5.2.x,QuTS hero h5.2.1.2929 build 20241025)`	affected	generic	—

Remediation

Vendor Solution

We have already fixed the vulnerability in the following version: Network & Virtual Switch in QTS 5.1.8.2823 build 20240712 and later Network & Virtual Switch in QTS 5.2.1.2930 build 20241025 and later Network & Virtual Switch in QuTS cloud c5.2.4.3041 build 20250211 and later Network & Virtual Switch in QuTS hero h5.1.8.2823 build 20240712 and later Network & Virtual Switch in QuTS hero h5.2.1.2929 build 20241025 and later

Tracking

Advisories

No advisories available

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required High

Attack Requirements None

User Interaction Passive

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact High

Subsequent System Integrity Impact High

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.360% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://www.qnap.com/en/release-notes/qts/5.1.8.2823/20240712
https://www.qnap.com/en/release-notes/qts/5.2.1.2930/20241025
https://www.qnap.com/en/release-notes/quts_hero/h5.1.8.2823/20240712
https://www.qnap.com/en/release-notes/quts_hero/h5.2.1.2929/20241025
https://www.qnap.com/en/release-notes/qutscloud/c5.2.4.3041/20250211

History

Oct 19, 2026 1:30 PM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Qnap Systems Qnap Systems network & Virtual Switch
Vendors & Products		Qnap Systems Qnap Systems network & Virtual Switch

Oct 15, 2026 7:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Oct 15, 2026 1:30 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch. If a remote attacker gains an administrator account, they can then exploit the vulnerability to inject malicious code. We have already fixed the vulnerability in the following version: Network & Virtual Switch in QTS 5.1.8.2823 build 20240712 and later Network & Virtual Switch in QTS 5.2.1.2930 build 20241025 and later Network & Virtual Switch in QuTS cloud c5.2.4.3041 build 20250211 and later Network & Virtual Switch in QuTS hero h5.1.8.2823 build 20240712 and later Network & Virtual Switch in QuTS hero h5.2.1.2929 build 20241025 and later
Title		Stored XSS via Interface Name in Network & Virtual Switch App
Weaknesses		CWE-79
References		https://www.qnap.com/en/release-notes/qts/5.1.8.2823/20240712 https://www.qnap.com/en/release-notes/qts/5.2.1.2930/20241025 https://www.qnap.com/en/release-notes/quts_hero/h5.1.8.2823/20240712 https://www.qnap.com/en/release-notes/quts_hero/h5.2.1.2929/20241025 https://www.qnap.com/en/release-notes/qutscloud/c5.2.4.3041/20250211
Metrics		cvssV4_0 `{'score': 6.2, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N'}`