{
    "document": {
        "category": "csaf_base",
        "csaf_version": "2.0",
        "distribution": {
            "tlp": {
                "label": "WHITE"
            }
        },
        "lang": "en",
        "notes": [
            {
                "category": "legal_disclaimer",
                "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
            }
        ],
        "publisher": {
            "category": "coordinator",
            "contact_details": "cert@ncsc.nl",
            "name": "National Cyber Security Centre",
            "namespace": "https://www.ncsc.nl/"
        },
        "title": "CVE-2024-14026",
        "tracking": {
            "current_release_date": "2026-03-23T23:51:36.673683Z",
            "generator": {
                "date": "2026-02-17T15:00:00Z",
                "engine": {
                    "name": "V.E.L.M.A",
                    "version": "1.7"
                }
            },
            "id": "CVE-2024-14026",
            "initial_release_date": "2026-03-11T08:25:04.728504Z",
            "revision_history": [
                {
                    "date": "2026-03-11T08:25:04.728504Z",
                    "number": "1",
                    "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (1).| CWES updated (1)."
                },
                {
                    "date": "2026-03-11T08:25:07.338377Z",
                    "number": "2",
                    "summary": "NCSC Score created."
                },
                {
                    "date": "2026-03-11T08:38:44.278719Z",
                    "number": "3",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (4).| References created (1).| CWES updated (1)."
                },
                {
                    "date": "2026-03-11T08:38:53.163384Z",
                    "number": "4",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-11T09:25:13.168623Z",
                    "number": "5",
                    "summary": "References created (1).| References removed (1)."
                },
                {
                    "date": "2026-03-11T11:35:01.441333Z",
                    "number": "6",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-11T14:39:41.978473Z",
                    "number": "7",
                    "summary": "Unknown change."
                },
                {
                    "date": "2026-03-11T22:08:06.647850Z",
                    "number": "8",
                    "summary": "Source created.| CVE status created. (valid)| EPSS created."
                },
                {
                    "date": "2026-03-11T22:08:11.519704Z",
                    "number": "9",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-12T21:25:06.292207Z",
                    "number": "10",
                    "summary": "CVSS created.| Products connected (48).| Product Identifiers created (48)."
                },
                {
                    "date": "2026-03-12T21:25:11.300286Z",
                    "number": "11",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-13T21:21:28.457905Z",
                    "number": "12",
                    "summary": "EPSS updated."
                },
                {
                    "date": "2026-03-13T21:21:33.619602Z",
                    "number": "13",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-20T05:36:16.042756Z",
                    "number": "14",
                    "summary": "Source connected.| CVE status created. (valid)| EPSS created."
                },
                {
                    "date": "2026-03-20T05:36:18.836670Z",
                    "number": "15",
                    "summary": "NCSC Score updated."
                }
            ],
            "status": "interim",
            "version": "15"
        }
    },
    "product_tree": {
        "branches": [
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.1.x|<5.1.9.2954build20241120",
                                "product": {
                                    "name": "vers:unknown/5.1.x|<5.1.9.2954build20241120",
                                    "product_id": "CSAFPID-1416704"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.2.x|<5.2.3.3006build20250108",
                                "product": {
                                    "name": "vers:unknown/5.2.x|<5.2.3.3006build20250108",
                                    "product_id": "CSAFPID-2432768"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "QTS"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.1.x|<h5.1.9.2954build20241120",
                                "product": {
                                    "name": "vers:unknown/h5.1.x|<h5.1.9.2954build20241120",
                                    "product_id": "CSAFPID-1416706"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.2.x|<h5.2.3.3006build20250108",
                                "product": {
                                    "name": "vers:unknown/h5.2.x|<h5.2.3.3006build20250108",
                                    "product_id": "CSAFPID-2432769"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "QuTS hero"
                    }
                ],
                "category": "vendor",
                "name": "QNAP Systems Inc."
            },
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.1.0.2348-build_20230325",
                                "product": {
                                    "name": "vers:unknown/5.1.0.2348-build_20230325",
                                    "product_id": "CSAFPID-5398878",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:qts:5.1.0.2348:build_20230325:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.1.0.2399-build_20230515",
                                "product": {
                                    "name": "vers:unknown/5.1.0.2399-build_20230515",
                                    "product_id": "CSAFPID-5398879",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:qts:5.1.0.2399:build_20230515:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.1.0.2418-build_20230603",
                                "product": {
                                    "name": "vers:unknown/5.1.0.2418-build_20230603",
                                    "product_id": "CSAFPID-5398880",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:qts:5.1.0.2418:build_20230603:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.1.0.2444-build_20230629",
                                "product": {
                                    "name": "vers:unknown/5.1.0.2444-build_20230629",
                                    "product_id": "CSAFPID-5398881",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:qts:5.1.0.2444:build_20230629:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.1.0.2466-build_20230721",
                                "product": {
                                    "name": "vers:unknown/5.1.0.2466-build_20230721",
                                    "product_id": "CSAFPID-5398882",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:qts:5.1.0.2466:build_20230721:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.1.1.2491-build_20230815",
                                "product": {
                                    "name": "vers:unknown/5.1.1.2491-build_20230815",
                                    "product_id": "CSAFPID-5398883",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:qts:5.1.1.2491:build_20230815:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.1.2.2533-build_20230926",
                                "product": {
                                    "name": "vers:unknown/5.1.2.2533-build_20230926",
                                    "product_id": "CSAFPID-5398884",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:qts:5.1.2.2533:build_20230926:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.1.3.2578-build_20231110",
                                "product": {
                                    "name": "vers:unknown/5.1.3.2578-build_20231110",
                                    "product_id": "CSAFPID-5446046",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:qts:5.1.3.2578:build_20231110:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.1.4.2596-build_20231128",
                                "product": {
                                    "name": "vers:unknown/5.1.4.2596-build_20231128",
                                    "product_id": "CSAFPID-5446047",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:qts:5.1.4.2596:build_20231128:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.1.5.2645-build_20240116",
                                "product": {
                                    "name": "vers:unknown/5.1.5.2645-build_20240116",
                                    "product_id": "CSAFPID-5446048",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:qts:5.1.5.2645:build_20240116:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.1.5.2679-build_20240219",
                                "product": {
                                    "name": "vers:unknown/5.1.5.2679-build_20240219",
                                    "product_id": "CSAFPID-5446049",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:qts:5.1.5.2679:build_20240219:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.1.6.2722-build_20240402",
                                "product": {
                                    "name": "vers:unknown/5.1.6.2722-build_20240402",
                                    "product_id": "CSAFPID-5446050",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:qts:5.1.6.2722:build_20240402:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.1.7.2770-build_20240520",
                                "product": {
                                    "name": "vers:unknown/5.1.7.2770-build_20240520",
                                    "product_id": "CSAFPID-5446051",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:qts:5.1.7.2770:build_20240520:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.1.8.2823-build_20240712",
                                "product": {
                                    "name": "vers:unknown/5.1.8.2823-build_20240712",
                                    "product_id": "CSAFPID-5446052",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:qts:5.1.8.2823:build_20240712:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.2.0.2737-build_20240417",
                                "product": {
                                    "name": "vers:unknown/5.2.0.2737-build_20240417",
                                    "product_id": "CSAFPID-5391882",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:qts:5.2.0.2737:build_20240417:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.2.0.2744-build_20240424",
                                "product": {
                                    "name": "vers:unknown/5.2.0.2744-build_20240424",
                                    "product_id": "CSAFPID-5391883",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:qts:5.2.0.2744:build_20240424:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.2.0.2782-build_20240601",
                                "product": {
                                    "name": "vers:unknown/5.2.0.2782-build_20240601",
                                    "product_id": "CSAFPID-5391884",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:qts:5.2.0.2782:build_20240601:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.2.0.2802-build_20240620",
                                "product": {
                                    "name": "vers:unknown/5.2.0.2802-build_20240620",
                                    "product_id": "CSAFPID-5391885",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:qts:5.2.0.2802:build_20240620:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.2.0.2823-build_20240711",
                                "product": {
                                    "name": "vers:unknown/5.2.0.2823-build_20240711",
                                    "product_id": "CSAFPID-5391886",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:qts:5.2.0.2823:build_20240711:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.2.0.2851-build_20240808",
                                "product": {
                                    "name": "vers:unknown/5.2.0.2851-build_20240808",
                                    "product_id": "CSAFPID-5391887",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:qts:5.2.0.2851:build_20240808:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.2.0.2860-build_20240817",
                                "product": {
                                    "name": "vers:unknown/5.2.0.2860-build_20240817",
                                    "product_id": "CSAFPID-5391888",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:qts:5.2.0.2860:build_20240817:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.2.1.2930-build_20241025",
                                "product": {
                                    "name": "vers:unknown/5.2.1.2930-build_20241025",
                                    "product_id": "CSAFPID-5391889",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:qts:5.2.1.2930:build_20241025:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.2.2.2950-build_20241114",
                                "product": {
                                    "name": "vers:unknown/5.2.2.2950-build_20241114",
                                    "product_id": "CSAFPID-5391890",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:qts:5.2.2.2950:build_20241114:*:*:*:*:*:*"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "qts"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.1.0.2409-build_20230525",
                                "product": {
                                    "name": "vers:unknown/h5.1.0.2409-build_20230525",
                                    "product_id": "CSAFPID-5398888",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.1.0.2409:build_20230525:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.1.0.2424-build_20230609",
                                "product": {
                                    "name": "vers:unknown/h5.1.0.2424-build_20230609",
                                    "product_id": "CSAFPID-5398889",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.1.0.2424:build_20230609:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.1.0.2453-build_20230708",
                                "product": {
                                    "name": "vers:unknown/h5.1.0.2453-build_20230708",
                                    "product_id": "CSAFPID-5398890",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.1.0.2453:build_20230708:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.1.0.2466-build_20230721",
                                "product": {
                                    "name": "vers:unknown/h5.1.0.2466-build_20230721",
                                    "product_id": "CSAFPID-5398891",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.1.0.2466:build_20230721:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.1.1.2488-build_20230812",
                                "product": {
                                    "name": "vers:unknown/h5.1.1.2488-build_20230812",
                                    "product_id": "CSAFPID-5398892",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.1.1.2488:build_20230812:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.1.2.2534-build_20230927",
                                "product": {
                                    "name": "vers:unknown/h5.1.2.2534-build_20230927",
                                    "product_id": "CSAFPID-5398893",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.1.2.2534:build_20230927:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.1.3.2578-build_20231110",
                                "product": {
                                    "name": "vers:unknown/h5.1.3.2578-build_20231110",
                                    "product_id": "CSAFPID-5446053",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.1.3.2578:build_20231110:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.1.4.2596-build_20231128",
                                "product": {
                                    "name": "vers:unknown/h5.1.4.2596-build_20231128",
                                    "product_id": "CSAFPID-5446054",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.1.4.2596:build_20231128:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.1.5.2647-build_20240118",
                                "product": {
                                    "name": "vers:unknown/h5.1.5.2647-build_20240118",
                                    "product_id": "CSAFPID-5446055",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.1.5.2647:build_20240118:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.1.5.2680-build_20240220",
                                "product": {
                                    "name": "vers:unknown/h5.1.5.2680-build_20240220",
                                    "product_id": "CSAFPID-5446056",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.1.5.2680:build_20240220:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.1.6.2734-build_20240414",
                                "product": {
                                    "name": "vers:unknown/h5.1.6.2734-build_20240414",
                                    "product_id": "CSAFPID-5446057",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.1.6.2734:build_20240414:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.1.7.2770-build_20240520",
                                "product": {
                                    "name": "vers:unknown/h5.1.7.2770-build_20240520",
                                    "product_id": "CSAFPID-5446058",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.1.7.2770:build_20240520:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.1.7.2788-build_20240607",
                                "product": {
                                    "name": "vers:unknown/h5.1.7.2788-build_20240607",
                                    "product_id": "CSAFPID-5446059",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.1.7.2788:build_20240607:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.1.7.2794-build_20240613",
                                "product": {
                                    "name": "vers:unknown/h5.1.7.2794-build_20240613",
                                    "product_id": "CSAFPID-5446060",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.1.7.2794:build_20240613:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.1.8.2823-build_20240712",
                                "product": {
                                    "name": "vers:unknown/h5.1.8.2823-build_20240712",
                                    "product_id": "CSAFPID-5446061",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.1.8.2823:build_20240712:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.2.0.2737-build_20240417",
                                "product": {
                                    "name": "vers:unknown/h5.2.0.2737-build_20240417",
                                    "product_id": "CSAFPID-5391900",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.2.0.2737:build_20240417:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.2.0.2782-build_20240601",
                                "product": {
                                    "name": "vers:unknown/h5.2.0.2782-build_20240601",
                                    "product_id": "CSAFPID-5391901",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.2.0.2782:build_20240601:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.2.0.2789-build_20240607",
                                "product": {
                                    "name": "vers:unknown/h5.2.0.2789-build_20240607",
                                    "product_id": "CSAFPID-5391902",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.2.0.2789:build_20240607:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.2.0.2802-build_20240620",
                                "product": {
                                    "name": "vers:unknown/h5.2.0.2802-build_20240620",
                                    "product_id": "CSAFPID-5391903",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.2.0.2802:build_20240620:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.2.0.2823-build_20240711",
                                "product": {
                                    "name": "vers:unknown/h5.2.0.2823-build_20240711",
                                    "product_id": "CSAFPID-5391904",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.2.0.2823:build_20240711:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.2.0.2851-build_20240808",
                                "product": {
                                    "name": "vers:unknown/h5.2.0.2851-build_20240808",
                                    "product_id": "CSAFPID-5391905",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.2.0.2851:build_20240808:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.2.0.2860-build_20240817",
                                "product": {
                                    "name": "vers:unknown/h5.2.0.2860-build_20240817",
                                    "product_id": "CSAFPID-5391906",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.2.0.2860:build_20240817:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.2.1.2929-build_20241025",
                                "product": {
                                    "name": "vers:unknown/h5.2.1.2929-build_20241025",
                                    "product_id": "CSAFPID-5391907",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.2.1.2929:build_20241025:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.2.1.2940-build_20241105",
                                "product": {
                                    "name": "vers:unknown/h5.2.1.2940-build_20241105",
                                    "product_id": "CSAFPID-5391908",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.2.1.2940:build_20241105:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/h5.2.2.2952-build_20241116",
                                "product": {
                                    "name": "vers:unknown/h5.2.2.2952-build_20241116",
                                    "product_id": "CSAFPID-5391909",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:qnap:quts_hero:h5.2.2.2952:build_20241116:*:*:*:*:*:*"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "quts_hero"
                    }
                ],
                "category": "vendor",
                "name": "QNAP"
            }
        ]
    },
    "vulnerabilities": [
        {
            "cve": "CVE-2024-14026",
            "cwe": {
                "id": "CWE-78",
                "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"
            },
            "notes": [
                {
                    "category": "description",
                    "text": "A command injection vulnerability has been reported to affect several QNAP operating system versions. If an attacker gains local network access who have also gained a user account, they can then exploit the vulnerability to execute arbitrary commands.\n\nWe have already fixed the vulnerability in the following versions:\nQTS 5.1.9.2954 build 20241120 and later\nQTS 5.2.3.3006 build 20250108 and later\nQuTS hero h5.1.9.2954 build 20241120 and later\nQuTS hero h5.2.3.3006 build 20250108 and later",
                    "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2024-14026"
                },
                {
                    "category": "description",
                    "text": "A command injection vulnerability has been reported to affect several QNAP operating system versions. If an attacker gains local network access who have also gained a user account, they can then exploit the vulnerability to execute arbitrary commands.\n\nWe have already fixed the vulnerability in the following versions:\nQTS 5.1.9.2954 build 20241120 and later\nQTS 5.2.3.3006 build 20250108 and later\nQuTS hero h5.1.9.2954 build 20241120 and later\nQuTS hero h5.2.3.3006 build 20250108 and later",
                    "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2024-14026"
                },
                {
                    "category": "other",
                    "text": "0.00037",
                    "title": "EPSS"
                },
                {
                    "category": "other",
                    "text": "CVSS:4.0/AV:P/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                    "title": "CVSSV4"
                },
                {
                    "category": "other",
                    "text": "2.0",
                    "title": "CVSSV4 base score"
                },
                {
                    "category": "other",
                    "text": "4.8",
                    "title": "NCSC Score"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-1416704",
                    "CSAFPID-1416706",
                    "CSAFPID-2432768",
                    "CSAFPID-2432769",
                    "CSAFPID-5391882",
                    "CSAFPID-5391883",
                    "CSAFPID-5391884",
                    "CSAFPID-5391885",
                    "CSAFPID-5391886",
                    "CSAFPID-5391887",
                    "CSAFPID-5391888",
                    "CSAFPID-5391889",
                    "CSAFPID-5391890",
                    "CSAFPID-5391900",
                    "CSAFPID-5391901",
                    "CSAFPID-5391902",
                    "CSAFPID-5391903",
                    "CSAFPID-5391904",
                    "CSAFPID-5391905",
                    "CSAFPID-5391906",
                    "CSAFPID-5391907",
                    "CSAFPID-5391908",
                    "CSAFPID-5391909",
                    "CSAFPID-5398878",
                    "CSAFPID-5398879",
                    "CSAFPID-5398880",
                    "CSAFPID-5398881",
                    "CSAFPID-5398882",
                    "CSAFPID-5398883",
                    "CSAFPID-5398884",
                    "CSAFPID-5398888",
                    "CSAFPID-5398889",
                    "CSAFPID-5398890",
                    "CSAFPID-5398891",
                    "CSAFPID-5398892",
                    "CSAFPID-5398893",
                    "CSAFPID-5446046",
                    "CSAFPID-5446047",
                    "CSAFPID-5446048",
                    "CSAFPID-5446049",
                    "CSAFPID-5446050",
                    "CSAFPID-5446051",
                    "CSAFPID-5446052",
                    "CSAFPID-5446053",
                    "CSAFPID-5446054",
                    "CSAFPID-5446055",
                    "CSAFPID-5446056",
                    "CSAFPID-5446057",
                    "CSAFPID-5446058",
                    "CSAFPID-5446059",
                    "CSAFPID-5446060",
                    "CSAFPID-5446061"
                ]
            },
            "references": [
                {
                    "category": "external",
                    "summary": "Source - nvd",
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-14026"
                },
                {
                    "category": "external",
                    "summary": "Source raw - nvd",
                    "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2024-14026"
                },
                {
                    "category": "external",
                    "summary": "Source - cveprojectv5",
                    "url": "https://www.cve.org/CVERecord?id=CVE-2024-14026"
                },
                {
                    "category": "external",
                    "summary": "Source raw - cveprojectv5",
                    "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/14xxx/CVE-2024-14026.json"
                },
                {
                    "category": "external",
                    "summary": "Source - first",
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-14026"
                },
                {
                    "category": "external",
                    "summary": "Source raw - first",
                    "url": "https://api.first.org/data/v1/epss?limit=10000&offset=80000"
                },
                {
                    "category": "external",
                    "summary": "Source - first",
                    "url": "https://api.first.org/data/v1/epss?limit=10000&offset=80000"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; nvd",
                    "url": "https://www.qnap.com/en/security-advisory/qsa-24-54"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                        "baseScore": 7.8,
                        "baseSeverity": "HIGH"
                    },
                    "products": [
                        "CSAFPID-1416704",
                        "CSAFPID-1416706",
                        "CSAFPID-2432768",
                        "CSAFPID-2432769",
                        "CSAFPID-5391882",
                        "CSAFPID-5391883",
                        "CSAFPID-5391884",
                        "CSAFPID-5391885",
                        "CSAFPID-5391886",
                        "CSAFPID-5391887",
                        "CSAFPID-5391888",
                        "CSAFPID-5391889",
                        "CSAFPID-5391890",
                        "CSAFPID-5391900",
                        "CSAFPID-5391901",
                        "CSAFPID-5391902",
                        "CSAFPID-5391903",
                        "CSAFPID-5391904",
                        "CSAFPID-5391905",
                        "CSAFPID-5391906",
                        "CSAFPID-5391907",
                        "CSAFPID-5391908",
                        "CSAFPID-5391909",
                        "CSAFPID-5398878",
                        "CSAFPID-5398879",
                        "CSAFPID-5398880",
                        "CSAFPID-5398881",
                        "CSAFPID-5398882",
                        "CSAFPID-5398883",
                        "CSAFPID-5398884",
                        "CSAFPID-5398888",
                        "CSAFPID-5398889",
                        "CSAFPID-5398890",
                        "CSAFPID-5398891",
                        "CSAFPID-5398892",
                        "CSAFPID-5398893",
                        "CSAFPID-5446046",
                        "CSAFPID-5446047",
                        "CSAFPID-5446048",
                        "CSAFPID-5446049",
                        "CSAFPID-5446050",
                        "CSAFPID-5446051",
                        "CSAFPID-5446052",
                        "CSAFPID-5446053",
                        "CSAFPID-5446054",
                        "CSAFPID-5446055",
                        "CSAFPID-5446056",
                        "CSAFPID-5446057",
                        "CSAFPID-5446058",
                        "CSAFPID-5446059",
                        "CSAFPID-5446060",
                        "CSAFPID-5446061"
                    ]
                }
            ],
            "title": "CVE-2024-14026"
        }
    ]
}