A vulnerability was found in QNAP QuNetSwitch 2.0.4.0415. It has been declared as critical. The impacted element is an unknown function. Such manipulation leads to os command injection.
This vulnerability is documented as CVE-2026-22902. The attack needs to be performed locally. There is not any exploit available.
It is recommended to upgrade the affected component.