Volerion logoVolerion
Volerion logoVolerion

QNAP QuNetSwitch Command Injection Vulnerability

Vulnerability

A command injection vulnerability exists in QuNetSwitch versions 2.0.x. This vulnerability allows remote attackers to execute arbitrary commands on the affected system. The issue has been resolved in QuNetSwitch versions 2.0.4.0415 and 2.0.5.0906.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected system.

Remediation

Users can update QuNetSwitch through the QTS or QuTS hero App Center. For ADRA NDR, log in, go to the Firmware section, select 'Update now', choose 'Latest', and click 'Apply'.

Added: Mar 20, 2026, 5:21 PM
Updated: Mar 20, 2026, 5:21 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
7.5
exploitability
4.7
remediation
7.7
relevance
4.2
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.