---
id: CVE-2026-41539
title: 'QTS, QuTS hero'
summary: >-
  A cross-site scripting (XSS) vulnerability has been reported to affect several
  QNAP operating system versions. The remote attackers can then exploit the
  vulnerability to bypass security mechanisms or read application data.


  We have alrea…
severity: medium
cvss: 6.3
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U'
cvssSource: cna
cwe:
  - CWE-79
vendor: QNAP Systems Inc.
product: QTS
affected:
  - QTS >= 5.2.0 < 5.2.9.3492 build 20260507
  - quts_hero >= h5.2.0 < h5.2.9.3499 build 20260514
  - quts_hero >= h5.3.0 < h5.3.4.3500 build 20260520
  - quts_hero >= ? < h6.0.0.3500 build 20260520
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-06-09T13:12:29.346617Z'
published: '2026-06-09'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T02:05:08.428Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-41539'
references:
  - url: 'https://www.qnap.com/en/security-advisory/qsa-26-10'
tags:
  - cve.org
epss: 0.00327
epssPercentile: 0.24261
ingestedAt: '2026-10-19T02:58:59.960Z'
---

## Overview

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data.

We have already fixed the vulnerability in the following versions:
QTS 5.2.9.3492 build 20260507 and later
QuTS hero h5.2.9.3499 build 20260514 and later
QuTS hero h5.3.4.3500 build 20260520 and later
QuTS hero h6.0.0.3500 build 20260520 and later

## Affected

- `QTS >= 5.2.0 < 5.2.9.3492 build 20260507`
- `quts_hero >= h5.2.0 < h5.2.9.3499 build 20260514`
- `quts_hero >= h5.3.0 < h5.3.4.3500 build 20260520`
- `quts_hero >= ? < h6.0.0.3500 build 20260520`

## Remediation

We have already fixed the vulnerability in the following versions:
QTS 5.2.9.3492 build 20260507 and later
QuTS hero h5.2.9.3499 build 20260514 and later
QuTS hero h5.3.4.3500 build 20260520 and later
QuTS hero h6.0.0.3500 build 20260520 and later