QNAP

Everything Packet Tribune has reported about QNAP: 2 stories, newest first. Part of our Vulnerabilities coverage.

QNAP TS-453E Format String Bug Allows Unauthenticated Remote Code Execution via Syslog

Zero Day Initiative details a high-severity format string vulnerability in QNAP TS-453E devices that allows remote attackers to execute code without credentials.

Oct 16, 2026

Vulnerabilities

QNAP HybridDesk Station Critical OS Command Injection CVE-2026-47786 Patched in 4.2.23 and 4.3.4 Branches

Remote attackers can execute arbitrary commands via this critical flaw in QNAP HybridDesk Station, with patches available for 4.2.23 and 4.3.4 branches.

Oct 15, 2026