A vulnerability was found in QNAP QuFTP Service up to 1.4.2/1.5.1/1.6.1 and classified as problematic. Impacted is an unknown function. The manipulation results in cross site scripting.
This vulnerability is cataloged as CVE-2026-22895. The attack may be launched remotely. There is no exploit available.
It is suggested to upgrade the affected component.
