Skip to content
OpenAdvisories
High · 8.1 CVE-2026-22897 EUVD-2026-13716

QuNetSwitch

Published Mar 20, 2026 · Updated Mar 25, 2026 · Assigned by qnap

Description

A command injection vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to execute arbitrary commands.

We have already fixed the vulnerability in the following version:
QuNetSwitch 2.0.4.0415 and later

Affected products

VendorProductAffectedFixed
QNAP Systems QuNetSwitch 2.0.x – < 2.0.4.0415 2.0.4.0415

References