CVE-2022-27596

CVSS 3.1: 9.8 critical
EPSS: 3%p85
Published: Jan 30, 2023 · Jan 30, 2023
Modified: Jun 17, 2026

Analyze CVE-2022-27596 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A vulnerability has been reported to affect QNAP device running QuTS hero, QTS. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QuTS hero, QTS: QuTS hero h5.0.1.2248 build 20221215 and later QTS 5.0.1.2234 build 20221201 and later

Vendors: qnap

Products: qts, quts hero

Weakness: CWE-89

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.7%)

In the news

8 stories

QNAP warns of new bug prompting worries of potential Deadbolt ransomware exploitation

The RecordFeb 7, 14:56 UTC · Feb 7, 2023RansomwareExploitedCVE-2022-275963 · 1 read

Week in review: Rail transport cybersecurity, “verified” OAuth apps used to infiltrate organizations

Help Net SecurityFeb 5, 00:00 UTC · Feb 5, 2023Data breachCVE-2022-27596 CVE-2023-20076 CVE-2023-225013 · 1 read

QNAP Fixes Critical Vulnerability in NAS Devices with Latest Security Updates

The Hacker NewsFeb 3, 03:59 UTC · Feb 3, 2023VulnerabilityCVE-2022-275962

30k Internet-exposed QNAP NAS hosts impacted by CVE-2022

Security AffairsFeb 2, 06:19 UTC · Feb 2, 2023RansomwareCVE-2022-275963 · 1 read

Nearly 30,000 QNAP Devices Exposed to New Bug

Infosecurity MagazineFeb 1, 09:30 UTC · Feb 1, 2023RansomwareCVE-2022-275963 · 1 read

QNAP: Patch Critical Remote Code Injection Bug

Infosecurity MagazineJan 31, 09:30 UTC · Jan 31, 2023VulnerabilityCVE-2022-275963 · 1 read

Critical QNAP NAS vulnerability fixed, update your device ASAP! (CVE-2022-27596)

Help Net SecurityJan 31, 00:00 UTC · Jan 31, 2023VulnerabilityCVE-2022-275963 · 1 read

QNAP addresses a critical flaw impacting its NAS devices

Security AffairsJan 30, 22:49 UTC · Jan 30, 2023VulnerabilityCVE-2022-275963 · 1 read