CVE-2026-22895
QuFTP Service
CVSS Score
0.0
EPSS Score
0.1%
EPSS Percentile
30th
A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions: QuFTP Service 1.4.3 and later QuFTP Service 1.5.2 and later QuFTP Service 1.6.2 and later
| CWE | CWE-79 |
| Vendor | qnap systems inc. |
| Product | quftp service |
| Published | Mar 20, 2026 |
| Last Updated | Mar 25, 2026 |
Stay Ahead of the Next One
Get instant alerts for qnap systems inc. quftp service
Be the first to know when new unknown vulnerabilities affecting qnap systems inc. quftp service are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
QNAP Systems Inc. / QuFTP Service
1.4.x < 1.4.3 1.5.x < 1.5.2 1.6.x < 1.6.2
References
Credits
Milan Solanki (LeoSecurity)