CVE-2024-13086: QNAP QTS

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An exposure of sensitive information vulnerability has been reported to affect product. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QTS 5.2.0.2851 build 20240808 and later QuTS hero h5.2.0.2851 build 20240808 and later

Affected products

• QNAP QTS: from 5.0.0, before 5.2.0.2851 (fixed in 5.2.0.2851)
• QNAP Quts Hero: from h5.0.0, before h5.2.0.2851 (fixed in h5.2.0.2851)

Published 2025-03-07. Last modified 2026-06-17.