CVE-2024-27130

HIGH 8.8CVE-2024-27130 · Published 21/05/2024 · updated 17/06/2026

In short

CVE-2024-27130 is a HIGH (CVSS 8.8) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 37.5%, higher than 98.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520 and later QuTS hero h5.1.7.2770 build 20240520 and later

References

qnap.com/en/security-advisory/qsa-24-23 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free