Qnap QTS and QuTS hero Exposure of Sensitive Information to an Unauthorized Actor (CVE-2024-13086)

Version 1.3 Feb 3, 2026, 2:33 PM CVSS metrics ("CVSSv2 score" set to 7.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") Exploit attributes ("Exploit available" set to "False") Exploit attributes ("Exploitability ease" set to "No known exploits are available") Plugin Feed: 202602031433
Version 1.2 Feb 2, 2026, 9:31 PM Plugin metadata (Update plugin name) Plugin Feed: 202602022131
Version 1.1 Jan 30, 2026, 10:33 PM New Plugin Feed: 202601302233

* Changelogs are generally available for changes made after Nov 1, 2022