CVE-2017-7635

QNAP NAS application Proxy Server through version 1.2.0 does not utilize CSRF protections.

• CWE-352

• http://www.securitytracker.com/id/1041025Third Party Advisory, VDB Entry
• https://www.qnap.com/en/security-advisory/nas-201806-01Vendor Advisory
• http://www.securitytracker.com/id/1041025Third Party Advisory, VDB Entry
• https://www.qnap.com/en/security-advisory/nas-201806-01Vendor Advisory

Published

Jun 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7629QNAP QTS before 4.2.6 build 20170517 has a flaw in the chang…
• CVE-2017-7630QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and …
• CVE-2017-7631Cross-site scripting (XSS) vulnerability in the share link f…
• CVE-2017-7632Cross-site scripting (XSS) vulnerability in File Station of …
• CVE-2017-7633QNAP Qfinder Pro 6.1.0.0317 and earlier may expose sensitive…
• CVE-2017-7634Cross-site scripting (XSS) vulnerability in QNAP NAS applica…
• CVE-2017-7636Cross-site scripting (XSS) vulnerability in QNAP NAS applica…
• CVE-2017-7637QNAP NAS application Proxy Server through version 1.2.0 allo…
• CVE-2017-7638QNAP NAS application Media Streaming add-on version 421.1.0.…
• CVE-2017-7639QNAP NAS application Proxy Server through version 1.2.0 does…
• CVE-2017-7640QNAP NAS application Media Streaming add-on version 421.1.0.…
• CVE-2017-7641QNAP NAS application Media Streaming add-on version 421.1.0.…