Critical severity9.8NVD Advisory· Published Jul 1, 2021· Updated Jun 17, 2026
CVE-2021-28804
CVE-2021-28804
Description
A command injection vulnerabilities have been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.1.1540 build 20210107. QNAP Systems Inc. QuTS hero versions prior to h4.5.1.1582 build 20210217.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6- QNAP Systems Inc./QTSv5Range: unspecified
- QNAP Systems Inc./QuTS herov5Range: unspecified
- Range: <4.5.1.1540
- Range: <h4.5.1.1582
Patches
Vulnerability mechanics
References
1- www.qnap.com/zh-tw/security-advisory/qsa-21-29nvdVendor Advisory
News mentions
0No linked articles in our index yet.