CVE-2018-19946: QNAP Helpdesk

Medium severity, CVSS 5.9. EPSS: 0.3% chance of exploitation in the next 30 days.

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate validation vulnerability could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.

Affected products

• QNAP Helpdesk: before 3.0.3 (fixed in 3.0.3)

Published 2020-09-11. Last modified 2026-06-17.