---
id: CVE-2026-34006
title: >-
  A missing authentication for critical function vulnerability has been reported
  to affect sMedio DTCP MOVE
summary: >-
  A missing authentication for critical function vulnerability has been reported
  to affect sMedio DTCP MOVE. If exploited, the vulnerability could allow remote
  attackers to gain access to the system.


  We have already fixed the vulnerabilit…
severity: critical
cvss: 9.3
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'
cwe:
  - CWE-306
vendor: QNAP Systems Inc.
product: sMedio DTCP MOVE
affected:
  - smedio_dtcp_move >= 1.4.x < 1.4.5
published: '2026-10-15'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T10:17:13.187'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-34006'
references:
  - url: >-
      https://www.qnap.com/en/app-release-notes?keyword=sMedio&app=sMedioDTCPServer&product-line=nas
    label: security@qnapsecurity.com.tw
tags:
  - nvd
  - cve.org
cvssSource: cna
ingestedAt: '2026-10-15T09:59:33.291Z'
---

## Overview

A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE. If exploited, the vulnerability could allow remote attackers to gain access to the system.

We have already fixed the vulnerability in the following version:
sMedio DTCP MOVE 1.4.5 and later

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.