QNAP Myqnapcloud Link vulnerabilities

2 CVEs affecting QNAP Myqnapcloud Link, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-32764, published 2024-04-26.

More from QNAP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-28815, published 2021-06-16. Medium severity, CVSS 4.9. EPSS: 1.7% chance of exploitation in the next 30 days. Insecure storage of sensitive information has been reported to affect QNAP NAS running myQNAPcloud Link. If exploited, this vulnerability allows remote attackers to read sensitive information by…
• CVE-2024-32764, published 2024-04-26. Critical severity, CVSS 9.9. EPSS: 0.4% chance of exploitation in the next 30 days. A missing authentication for critical function vulnerability has been reported to affect myQNAPcloud Link. If exploited, the vulnerability could allow users with the privilege level of some…