CVE-2024-38639NVD

Description

An improper authentication vulnerability has been reported to affect product. The remote attackers can then exploit the vulnerability to compromise the security of the system.
QTS is not affected.

We have already fixed the vulnerability in the following version:

Severity Level

MEDIUM (4.8)

Published Date

18/09/2026

Last Modified

18/09/2026

Exploitation Status

????

EPSS Score

0.25% (percentile 16.1%)

CVSS Base Metrics

CVSS v3 (3.1)

MEDIUM 4.8

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

Weaknesses (CWE)

CWE-287 - CWE-287

Affected & Patched Versions

Product	Affected Versions	Patched Version
QNAP Systems Inc. QTS	N/A	?

References

https://www.qnap.com/en/security-advisory/qsa-24-37

Critical Alert 3 Active Exploits Detected Today

CVE Watchtower