A series of vulnerabilities in QNAP NAS products has prompted security warnings after researchers identified flaws that could allow attackers to execute arbitrary commands, bypass security controls, disclose sensitive information, or disrupt system operations. The issues affect several QNAP platforms, including QTS, QuTS hero, QuTS cloud, and QVP appliances.

The security advisory, identified as QSA-26-10, was released by QNAP on June 17, 2026, while a related security notice was published on June 24, 2026. The vulnerabilities were assigned an “Important” severity rating and have since been marked as resolved through updated software releases.
Affected Products from Vulnerabilities in QNA...