Security Advisory

CVE-2026-22902

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-20 16:21:07

Last updated 2026-03-25 14:05:39

Assigner qnap

State PUBLISHED

Description

A command injection vulnerability has been reported to affect QuNetSwitch. If a local attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuNetSwitch 2.0.5.0906 and later

← Browse all CVEs View on cve.org ↗