Security Alert (A26-10-53): Multiple Vulnerabilities in QNAP Products

Description:

QNAP has published security advisories to address multiple vulnerabilities in QNAP products. The list of patches can be found at:
https://www.qnap.com/go/security-advisory/qsa-26-18

Affected Systems:

• QNAP NAS devices running QTS 6.1.0
• QNAP NAS devices running QTS 5.2.11 and earlier
• QNAP NAS devices running QuTS hero h6.1.0
• QNAP NAS devices running QuTS hero h6.0.x
• QNAP NAS devices running QuTS hero h5.2.11 and earlier
• QNAP NAS devices running QuTScloud c5.2.9 and earlier

For detailed information of the affected systems, please refer to the corresponding security advisories at vendor's website.

Impact:

Successful exploitation of the vulnerabilities could lead to remote code execution or information disclosure on an affected system.

Recommendation:

Patches for affected systems are available. System administrators of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

More Information:

• https://www.qnap.com/go/security-advisory/qsa-26-18
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 (to CVE-2026-109619)