CVE-2020-2507: QNAP Helpdesk

Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days.

The vulnerability have been reported to affect earlier versions of QTS. If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.3.

Affected products

• QNAP Helpdesk: before 3.0.3 (fixed in 3.0.3)

Published 2021-02-03. Last modified 2026-06-17.