CVE-2021-28810: QNAP Roon Server

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

If exploited, this vulnerability allows an attacker to access resources which are not otherwise accessible without proper authentication. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later

Affected products

• QNAP Roon Server: before 2021-05-18 (fixed in 2021-05-18)

Published 2021-06-08. Last modified 2026-06-17.