CVE-2026-22896: Network & Virtual Switch QTS 5.1.x to before QTS 5.1.8.2823 build 20240712, QTS 5.2.x to before QTS 5.2.1.2930 build…

Affected technology

Network & Virtual Switch · QTS 5.1.x to before QTS 5.1.8.2823 build 20240712, QTS 5.2.x to before QTS 5.2.1.2930 build 20241025, QuTS cloud c5.2.x to before QuTS cloud c5.2.4.3041 build 20250211, QuTS hero h5.1.x to before QuTS hero h5.1.8.2823 build 20240712, QuTS hero h5.2.x to before QuTS hero h5.2.1.2929 build 20241025
QNAP Systems Inc.

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · High privileges required · Passive user interaction

What an attacker can do

Vendor/CNA’s CVSS 4.0 assessment (base score 6.2/10) rates confidentiality, integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.