CVE-2026-34006criticalCWE-306

CVE-2026-34006: critical vulnerability in QNAP Systems Inc. sMedio DTCP MOVE

Pre-Authentication Multiple Critical Vulnerabilities in QNAP sMedioDTCPServer

Published

Follow this CVE+ Monitor sMedio DTCP MOVE

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 0.4%
A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability in the following version: sMedio DTCP MOVE 1.4.5 and later
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
QNAP Systems Inc. · sMedio DTCP MOVE