CVE-2026-34006

CVSS 9.3 (critical) · published 2026-10-15

A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability in the following version: sMedio DTCP MOVE 1.4.5 and later

Weakness: CWE-306

Source: NVD CVE-2026-34006

References

• https://www.qnap.com/en/app-release-notes?keyword=sMedio&app=sMedioDTCPServer&product-line=nas

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.