Tyaoo、0X14

**Name of the Vulnerable Software and Affected Versions** QNAP QTS versions prior to 4.5.4.2790 build 20240605 QNAP QuTS hero versions prior to h4.5.4.2790 build 20240606 **Description** An OS command injection issue has been reported to affect several QNAP operating system versions. If exploited, the issue could allow authenticated administrators to execute commands via a network. **Recommendations** For QNAP QTS versions prior to 4.5.4.2790 build 20240605, update to QTS 4.5.4.2790 build 20240605 or later. For QNAP QuTS hero versions prior to h4.5.4.2790 build 20240606, update to QuTS hero h4.5.4.2790 build 20240606 or later.

**Name of the Vulnerable Software and Affected Versions** QNAP QTS versions prior to 4.5.4.2627 build 20231225 QNAP QuTS hero versions prior to h4.5.4.2626 build 20231225 **Description** An OS command injection issue has been reported, affecting several QNAP operating system versions. If exploited, this could allow authenticated administrators to execute commands via a network. **Recommendations** For QNAP QTS versions prior to 4.5.4.2627 build 20231225, update to QTS 4.5.4.2627 build 20231225 or later. For QNAP QuTS hero versions prior to h4.5.4.2626 build 20231225, update to QuTS hero h4.5.4.2626 build 20231225 or later.

**Name of the Vulnerable Software and Affected Versions** QNAP QuTS hero versions prior to h4.5.4.2626 build 20231225 QNAP QTS versions prior to 4.5.4.2627 build 20231225 **Description** An OS command injection issue has been reported, affecting several QNAP operating system versions. This could allow authenticated administrators to execute commands via a network. **Recommendations** For QNAP QuTS hero versions prior to h4.5.4.2626 build 20231225, update to version h4.5.4.2626 build 20231225 or later. For QNAP QTS versions prior to 4.5.4.2627 build 20231225, update to version 4.5.4.2627 build 20231225 or later.