CVE-2017-7637: QNAP NAS Proxy Server

Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days.

QNAP NAS application Proxy Server through version 1.2.0 allows remote attackers to run arbitrary OS commands against the system with root privileges.

Affected products

• QNAP NAS Proxy Server: before 1.3.0 (fixed in 1.3.0)

Published 2018-06-05. Last modified 2026-06-17.