All vulnerabilities
CVE-2026-34006

Pre-Authentication Multiple Critical Vulnerabilities in QNAP sMedioDTCPServer

QNAP Systems Inc. sMedio DTCP MOVE
Open in ThreatlineRecord JSON
CVSS
9.3Critical
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.53%Chance of exploitation activity in the next 30 days, higher than 44% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in1.4.5Fixed versionCVE List
Published15 Oct 2026Updated 15 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE. If exploited, the vulnerability could allow remote attackers to gain access to the system.

We have already fixed the vulnerability in the following version: sMedio DTCP MOVE 1.4.5 and later

Text from CVE List

Affected versions 1

  • sMedio DTCP MOVEaffected: 1.4.x before 1.4.5CVE List

References 1