PT-2026-26640 · Qnap Systems · Qunetswitch

Yingmuo · Published 2026-03-20 · Updated 2026-03-20 · CVE-2026-22900

Mitre

CVSS v4.0

6.8

Medium

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:U

A use of hard-coded credentials vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to gain unauthorized access.

We have already fixed the vulnerability in the following version: QuNetSwitch 2.0.5.0906 and later

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2026-22900

Affected Products

Qunetswitch

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-22900 · Security Note
• https://qnap.com/en/security-advisory/qsa-26-11 · Note