QNAP CVEs — PoCs and detection rules¶
3 QNAP vulnerabilities with detection-only proof-of-concept code and Docker labs; 3 ship ready-to-deploy detection and prevention rules (Snort, YARA, Nginx, Apache). For authorized testing and blue-team detection engineering.
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-32766 — QNAP NAS RCE | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27130 — QNAP NAS Buffer Overflow | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27131 — QNAP NAS Buffer Overflow | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |