Skip to content
NewA calmer, faster ZeroHour

CVE-2026-22898

CVSS 4.0
9.3 critical
EPSS
<1%p50
Published
·
Modified
Analyze CVE-2026-22898 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A missing authentication for critical function vulnerability has been reported to affect QVR Pro. The remote attackers can then exploit the vulnerability to gain access to the system. We have already fixed the vulnerability in the following version: QVR Pro 2.7.4.14 and later

Vendors
qnap
Products
qvr pro
Weakness
CWE-306
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

In the news

1 story