CVE-2026-22895

A cross-site scripting XSS vulnerability has been reported to affect QuFTP Service. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version...

EUVD-2026-13714

A cross-site scripting XSS vulnerability has been reported to affect QuFTP Service. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version...

CVE-2026-22895

A cross-site scripting XSS vulnerability has been reported to affect QuFTP Service. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version...

CVE-2026-22895 QuFTP Service

A cross-site scripting XSS vulnerability has been reported to affect QuFTP Service. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version...

CVE-2026-22895

QuFTP Service exposes an XSS vulnerability (CVE-2026-22895). The issue is triggered when an attacker with administrator access can exploit it to bypass security controls or read application data. Affected versions are QuFTP Service 1.4.3 and earlier, 1.5.1 and earlier according to the fixes, with...

CVE-2026-22895 QuFTP Service

A cross-site scripting XSS vulnerability has been reported to affect QuFTP Service. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version...

CVE-2026-22895

A cross-site scripting XSS vulnerability has been reported to affect QuFTP Service. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version...

CVE-2026-22895: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability has been reported to affect QuFTP Service. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version...

QNAP Systems QuFTP Service 跨站脚本漏洞

QNAP Systems QuFTP Service is a service component provided by QNAP Systems, a company based in Taiwan, China. It offers File Transfer Protocol services and remote file access management capabilities. The QNAP Systems QuFTP Service has a cross-site scripting vulnerability. This vulnerability stems...

PT-2026-26637

Name of the Vulnerable Software and Affected Versions QuFTP Service versions prior to 1.4.3 QuFTP Service versions prior to 1.5.2 QuFTP Service versions prior to 1.6.2 Description A cross-site scripting XSS issue exists in QuFTP Service. A remote attacker who obtains an administrator account can...