CVE-2024-32764: QNAP Myqnapcloud Link

Critical severity, CVSS 9.9. EPSS: 0.4% chance of exploitation in the next 30 days.

A missing authentication for critical function vulnerability has been reported to affect myQNAPcloud Link. If exploited, the vulnerability could allow users with the privilege level of some functionality via a network. We have already fixed the vulnerability in the following version: myQNAPcloud Link 2.4.51 and later

Affected products

• QNAP Myqnapcloud Link: from 2.4.0, before 2.4.51 (fixed in 2.4.51)

Published 2024-04-26. Last modified 2026-06-17.