Hi,
The recently published security vulnerability with Security ID: QSA-26-10 shows QTS version 5.2.10 as the patched version. However, when I try to update my Qnap devices, it says the latest update is 5.2.9.3499.
Why can’t I update to the fixed version? Can you help me? Thank you.
Hello,
there is no QTS 5.2.10.
The lastest version is QTS 5.2.9.3499.
You must wait some days before QNAP released QTS 5.2.10.x
However, it is completely incomprehensible that QNAP is thereby challenging hackers to exploit the QSA-26-10 security vulnerability!
Fix the bug first, and only then report the security vulnerability!
If your NAS is properly behind your firewall, how are hackers going to access it?
I do agree with you though. They should publish the update, then issue the security bulletin.
It is not just me who is at risk, but also several others with an open firewall.
Rule Number 1 with a QNAP: DO NOT HAVE AN OPEN FIREWALL! Do not expose your NAS to the internet!!!
We apologize for the confusion — this is likely a typo from our team. We will be more rigorous in reviewing future announcements to prevent similar issues from happening again. Thank you all for your understanding.