QcalAgent vulnerabilities

2 known vulnerabilities in QcalAgent from QNAP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  QcalAgent: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-41544Oct 15, 2026QNAP

  A path traversal vulnerability has been reported to affect QcalAgent. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the fol

• 8.8 High severity

  QcalAgent: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-41289Jan 5, 2024QNAPEPSS 1.13%

  An OS command injection vulnerability has been reported to affect QcalAgent. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QcalAgent 1.1.8 an