QNAP has patched 3 vulnerabilities in its NAS devices, including authentication bypass.

The most serious of these is the CVE-2024-21899 vulnerability with a CVSS score of 9.8, which can be exploited by a remote unauthorized attacker.

Lists the versions affected by the vulnerabilities and the versions released by the Taiwanese manufacturer to fix them. Instructions are included for updating QTS, QuTS hero, QuTScloud, and myQNAPcloud.

Details can be found in the official announcement, as well as on the Twitter and Facebook pages of Pierluigi Paganini (SecurityAffairs - hacking, NAS).