9.3Kritik

CVE-2026-47786Pre-Authentication Command Injection

QNAP Systems Inc. HybridDesk Station Yayım: (1 ay önce)

Açıklama

An OS command injection vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.23 and later HybridDesk Station 4.3.4 and later

Zayıflık türü (CWE): CWE-78

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
QNAP Systems Inc. HybridDesk Station 4.2.x – < 4.2.23, 4.3.x – < 4.3.4

Kaynaklar ve yamalar