CVE-2022-27592

6.7 mediumEPSS 0.2%

Medium (6.7) in qnap qvr smart client. EPSS 0.2% chance of exploitation in the next 30 days.

An unquoted search path or element vulnerability has been reported to affect QVR Smart Client. If exploited, the vulnerability could allow local authenticated administrators to execute unauthorized code or commands via unspecified vectors. We have already fixed the vulnerability in the following version: Windows 10 SP1, Windows 11, Mac OS, and Mac M1: QVR Smart Client 2.4.0.0570 and later

Severity

CVSS 3.1

6.7 medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
CWE: CWE-428
Published: 2024-09-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

qnap:qvr_smart_client

References

https://www.qnap.com/en/security-advisory/qsa-24-22

Check your stack JSON