Volerion logoVolerion
Volerion logoVolerion

QNAP QuNetSwitch Command Injection Vulnerability Allowing Arbitrary Command Execution

Vulnerability

A command injection vulnerability has been identified in QNAP QuNetSwitch versions 2.0.x. This vulnerability allows local attackers with administrator privileges to execute arbitrary commands on the affected system.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of commands with administrative privileges on the affected system.

Remediation

Users can update to QuNetSwitch version 2.0.5.0906 or later to address this vulnerability. Instructions for updating QuNetSwitch are available on the QNAP website.

Added: Mar 20, 2026, 5:18 PM
Updated: Mar 20, 2026, 5:18 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
7.5
exploitability
2.8
remediation
7.7
relevance
4.2
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.