Fixes have been released by QNAP to address 12 security flaws, many of which are high-severity, impacting its various products, according to SecurityWeek. QTS version 5.1.x and QuTS hero version h5.1.x have been affected by the high-severity prototype pollution bug, tracked as CVE-2023-39296, which could be exploited “to override existing attributes with ones that have an incompatible type, which may cause the system to crash,”

Source: SC Magazine