CVE-2026-47790
EUVD-2026-10199015.10.2026, 10:17
A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a remote attacker gains a user account, they can then exploit the vulnerability to inject malicious code. We have already fixed the vulnerability in the following version: QuFTP Service 1.4.6 and later QuFTP Service 1.5.5 and later QuFTP Service 1.6.5 and later
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| qnap | quftp | 1.4.0 ≤ 𝑥 < 1.4.6 | CNA |
| qnap | quftp | 1.5.0 ≤ 𝑥 < 1.5.5 | CNA |
| qnap | quftp | 1.6.0 ≤ 𝑥 < 1.6.5 | CNA |