CVE-2021-28814: QNAP Helpdesk

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

An improper access control vulnerability has been reported to affect QNAP NAS. If exploited, this vulnerability allows remote attackers to compromise the security of the software. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.4.

Affected products

• QNAP Helpdesk: before 3.0.4 (fixed in 3.0.4)

Published 2021-06-11. Last modified 2026-06-17.