CVE-2024-32762: QNAP Qulog Center

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QuLog Center 1.8.0.872 ( 2024/06/17 ) and later QuLog Center 1.7.0.827 ( 2024/06/17 ) and later

Affected products

• QNAP Qulog Center: from 1.7.0, before 1.7.0.827 (fixed in 1.7.0.827); from 1.8.0, before 1.8.0.872 (fixed in 1.8.0.872)

Published 2024-09-06. Last modified 2026-06-17.