What is CVE-2024-38639?

CVE-2024-38639 is a medium-severity vulnerability, classified under Improper Authentication. CVSS score: 4.8/10. Published 2026-09-18.

How severe is CVE-2024-38639?

Medium severity. CVSS v3 base score is 4.8 out of 10.

CVE-2024-38639

CVE-2024-38639

An improper authentication vulnerability has been reported to affect product. The remote attackers can then exploit the vulnerability to compromise the security of the system. QTS is not affected. We have already fixed the vulnerability in the following version:

Vulnerability class: Broken Authentication

CVSS v3 metric

CVSS v3 base score 4.8 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L.

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

security@qnapsecurity.com.tw

Frequently asked questions

What is CVE-2024-38639?: CVE-2024-38639 is a medium-severity vulnerability, classified under Improper Authentication. CVSS score: 4.8/10. Published 2026-09-18.
How severe is CVE-2024-38639?: Medium severity. CVSS v3 base score is 4.8 out of 10.