Everything Threat Times has reported about QNAP: 3 stories, newest first. Part of our Vulnerabilities coverage.
QNAP released version 1.4.5 to address a critical missing authentication vulnerability that allows remote attackers to access sMedio DTCP MOVE systems without credentials.
A critical symlink following vulnerability in QNAP QuMagie before 2.9.2 allows authenticated attackers to compromise the system, per the National Vulnerability Database.
QNAP has released a patch for a critical remote path traversal vulnerability in Qsirch that allows attackers to read sensitive system files.