Vulnerability Details CVE-2026-22897
A command injection vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to execute arbitrary commands.
We have already fixed the vulnerability in the following version:
QuNetSwitch 2.0.4.0415 and later
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 77.8%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2026-22897
-
cpe:2.3:a:qnap:qunetswitch:*