Hardware Config:
NAS Model: QNAP TS-464
RAM: 16GB (Upgraded)
OS: QuTS hero (ZFS)
Current Version: h6.0.0.3397 Beta (Build 2026/02/06)
Reported Issue:
I am reporting a critical flaw in the firmware installer logic during the update to version h6.0.0.3397 Beta. At approximately 6% of the verification phase, the system correctly triggered a security pop-up: “The firmware does not have a valid digital signature”.
Anomalous Behavior:
Even though no manual confirmation was given to the warning pop-up (the user was waiting to decide whether to proceed or cancel), the installation forcefully proceeded in the background. The system bypassed the digital signature security block, completed the update, and requested a reboot as if the validation had been successful.
I have attached the screenshot showing the verification error at 6%. It is essential that the QuTS hero installer strictly halts any write operation if the digital signature is not validated and explicitly confirmed by the administrator.
