CVE-2021-28810

HIGH 7.5CVE-2021-28810 · Published 08/06/2021 · updated 17/06/2026

In short

CVE-2021-28810 is a HIGH (CVSS 7.5) vulnerability affecting roon server (qnap).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.8% of all vulnerabilities.
Fix: update to 2021-05-18 or later.

Package	Affected versions	Patched versions
roon server qnap	`< 2021-05-18`	`2021-05-18`

Description

If exploited, this vulnerability allows an attacker to access resources which are not otherwise accessible without proper authentication. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later

References

qnap.com/zh-tw/security-advisory/qsa-21-17 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free