CVE-2018-19948: QNAP Helpdesk

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this cross-site request forgery (CSRF) vulnerability could allow attackers to force NAS users to execute unintentional actions through a web application. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.

Affected products

• QNAP Helpdesk: before 3.0.3 (fixed in 3.0.3)

Published 2020-09-11. Last modified 2026-06-17.