CVE-2026-22898criticalCWE-306

CVE-2026-22898: critical vulnerability in QNAP Systems Inc. QVR Pro

QVR Pro

Published · Updated

Follow this CVE+ Monitor QVR Pro

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 0.7%
A missing authentication for critical function vulnerability has been reported to affect QVR Pro. The remote attackers can then exploit the vulnerability to gain access to the system. We have already fixed the vulnerability in the following version: QVR Pro 2.7.4.14 and later
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
QNAP Systems Inc. · QVR Pro
Related CVEs — QNAP Systems Inc. QVR Pro

In the same product, most dangerous first.

CVE-2021-38692HIGHStack Overflow Vulnerability in QVR Elite, QVR Pro and QVR GuardEPSS 1.3%CVE-2021-38691HIGHStack Overflow Vulnerability in QVR Elite, QVR Pro and QVR GuardEPSS 1.3%CVE-2021-38690HIGHStack Overflow Vulnerability in QVR Elite, QVR Pro and QVR GuardEPSS 1.3%CVE-2021-38689HIGHStack Overflow Vulnerability in QVR Elite, QVR Pro and QVR GuardEPSS 1.3%CVE-2021-38682HIGHStack Overflow Vulnerability in QVR Elite, QVR Pro and QVR GuardEPSS 1.3%