Skip to content
OpenAdvisories
Critical · 9.8 Known exploited · Ransomware CVE-2019-7193 EUVD-2019-16737GHSA-964w-hfj4-c2g7

This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP…

Published Dec 5, 2019 · Updated Oct 21, 2025 · Assigned by qnap

Description

This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.

Affected products

VendorProductAffectedFixed
— QNAP NAS devices QTS 4.4.0 - QTS 4.4.1: before build 20190918, QTS 4.3.6: before build 20190919 —

References