CVE-2020-36198

The Malware Remover tool by QNAP Systems Inc. is vulnerable to a command injection flaw in versions prior to 4.6.1.0 (excluding version 3.x). The root cause is the improper elimination of certain elements during the processing of TAR files in the file system at the operating level. Specifically, ...

CVE-2025-11837

The Malware Remover application, a built-in security tool from QNAP Systems , is vulnerable to an improper control of generation of code vulnerability. This flaw allows remote attackers to perform code injection , which can lead to remote code execution and the ability to bypass protection mechan...