CVE-2026-24715— Lack of Reproducible Vulnerability Evidence in QNAP Report
Quick assessment
Affected
QNAP Systems Inc. QuRouter
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
报告称存在一个可观测的时间偏差漏洞，影响 QuRouter。如果该漏洞被利用，远程攻击者可能会获取敏感数据。 我们已在以下版本中修复了此漏洞： QuRouter 2.7.2.113 及更高版本
Possible ATT&CK Techniques 1 AI
T1590 · Gather Victim Network InformationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| QNAP Systems Inc. | QuRouter | 2.7.x< 2.7.2.113 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-24715
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Lack of Reproducible Vulnerability Evidence in QNAP Report
Source: CVE Program / CVE List V5
Vulnerability Description
An observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to obtain sensitive data.
We have already fixed the vulnerability in the following version:
QuRouter 2.7.2.113 and later
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过时间差异性导致的信息暴露
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| QNAP Systems Inc. | QuRouter | 2.7.x ~ 2.7.2.113 | - |
|
II. Public POCs for CVE-2026-24715
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-24715
请登录查看更多情报信息。
Other References for CVE-2026-24715 (1)
Same Patch Batch · QNAP Systems Inc. · 2026-10-15 · 35 CVEs total
| CVE-2026-50612 | 9.4 CRITICAL | Import Symlink Following Remote Code Execution Vulnerability in QuMagie |
| CVE-2026-34006 | 9.3 CRITICAL | Pre-Authentication Multiple Critical Vulnerabilities in QNAP sMedioDTCPServer |
| CVE-2026-50619 | 9.3 CRITICAL | Unauthenticated remote code execution vulnerability |
| CVE-2026-47786 | 9.3 CRITICAL | Pre-Authentication Command Injection |
| CVE-2026-39997 | 8.9 HIGH | Unauthenticated Remote Input Injection in QNAP HD Station's remotepad |
| CVE-2026-39993 | 8.7 HIGH | Path Traversal to Root RCE in QNAP Download Station via Addon/Search addon Parameter |
| CVE-2026-34015 | 8.7 HIGH | Remote Code Execution in upload.php of Video Station |
| CVE-2026-44084 | 8.7 HIGH | Access Code Forgery in Video Station leading to unauthorized media access |
| CVE-2026-53882 | 8.7 HIGH | Path Traversal in Virtualization Station VM Import |
| CVE-2026-41544 | 8.7 HIGH | Path Traversal leading to Arbitrary File Move, Docker Escape, and Host RCE in /calapi/rena |
| CVE-2026-41545 | 8.6 HIGH | WebSocket timelapse path traversal and command injection |
| CVE-2026-34008 | 8.5 HIGH | **Privilege Escalation** World-writable crontab path monitored and executed by root-owned |
| CVE-2026-34014 | 8.4 HIGH | ds-move-files.sh is writable and executed as root |
| CVE-2026-34009 | 8.4 HIGH | **Container Escape** Host user home directory mounted with write access into application c |
| CVE-2025-66275 | 7.7 HIGH | Remote code execution via command injection |
| CVE-2025-66272 | 7.7 HIGH | Arbitrary file deletion and remote code execution |
| CVE-2025-68404 | 7.5 HIGH | vcs_pentest Race Condition Authentication Bypass Vulnerability in QuRouter management inte |
| CVE-2026-26243 | 7.2 HIGH | Arbitrary Folder Deletion in Qsync Central 5.0.0.5 |
| CVE-2026-26244 | 7.1 HIGH | SQLi#1 SQL Injection in class_videos.php _getFilters |
| CVE-2026-26245 | 7.1 HIGH | SQLi#2 SQL Injection in class_videos.php getSmartVideosByOffset |
Showing top 20 of 35 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: QNAP Systems Inc.
-
CVE-2026-50619
Unauthenticated remote code execution vulnerability -
CVE-2026-47790
Privilege Escalation via QuFTP Log-based XSS -
CVE-2026-47786
Pre-Authentication Command Injection -
CVE-2026-39997
Unauthenticated Remote Input Injection in QNAP HD Station's -
CVE-2026-39991
Stored Cross-Site Scripting (XSS) in Note Station file uploa
Same weakness: CWE-208
-
CVE-2026-49265
OAuthLib: Timing Attack Vulnerability in PKCE code_verifier -
CVE-2026-109379
Cockpit CMS 2.14.1 Account Enumeration via Timing Discrepanc -
CVE-2026-83535
Openstack-network-exporter: basic-auth uses plaintext passwo -
CVE-2026-107269
Gophish through 0.12.1 Username Enumeration via POST /login -
CVE-2026-18040
HQC leaks private key information through secret-indexed GF(
V. Comments for CVE-2026-24715
No comments yet