A vulnerability, which was classified as critical, has been found in QNAP QTS and QuTS hero. Affected by this issue is some unknown functionality. The manipulation leads to os command injection.

This vulnerability is handled as CVE-2024-38641. The attack needs to be approached within the local network. There is no exploit available.

It is recommended to upgrade the affected component.