Back Cybersecuritynews

Critical QNAP QVR Pro Vulnerability Let Remote Attackers Gain Access to the System

Cybersecuritynews •Abinaya • March 23, 2026

QNAP has released a critical security advisory addressing a severe vulnerability in its QVR Pro surveillance software. Tracked as CVE-2026-22898, this flaw allows remote, unauthenticated attackers to gain unauthorized access to affected systems. Users relying on QVR Pro 2.7. x must immediately apply the latest patches to secure their network-attached storage environments against potential intrusions. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical QNAP QVR Pro Vulnerability Exposes Systems to Remote Attacks QNAP has issued an urgent advisory regarding a critical vulnerability in its QVR Pro application, disclosed on March 21, 2026, identified as CVE-2026-22898. This flaw allows unauthorized remote attackers to access systems without authentication due to a missing security check. Affected systems include those running QVR Pro version 2.7.x, which is widely used for network video surveillance. The vulnerability could enable attackers to view surveillance feeds, alter configurations, or delete video archives, posing significant risks to both physical security and corporate data integrity. Fortunately, QNAP has released a patch in version 2.7.4.1485 to address this issue. Organizations are urged to update their systems immediately to mitigate potential exploitation. Other vulnerabilities in QNAP's software also exist, but the QVR Pro flaw is considered the most critical. As of now, there are no reports of active exploitation of this vulnerability. 5 sources 73

Extracted Entities

Critical QNAP QVR Pro Vulnerability Let Remote Attackers Gain Access to the System

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)