QNAP Roon Server未授权RCE漏洞（CVE-2021-28810、CVE-2021-28811）

...

CVE-2021-28811

CVE-2021-28811 refers to a command-injection flaw in Roon Server. The vulnerability, if exploited, could allow remote attackers to execute arbitrary commands. Roon Labs indicates fixes in Roon Server versions released on 2021-05-18 and later. Documents consistently identify the affected component...