CVE-2021-38691

A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QVR Elite, QVR Pro, QVR Guard: QuTS hero h5.0.0: QVR Elite 2.1.4.0 (2021/12/06) and later QuTS hero h4.5.4: QVR Elite 2.1.4.0 (2021/12/06) and later QTS 5.0.0: QVR Elite 2.1.4.0 (2021/12/06) and later QTS 4.5.4: QVR Elite 2.1.4.0 (2021/12/06) and later QTS 4.5.4: QVR Pro 2.1.3.0 (2021/12/06) and later QTS 5.0.0: QVR Pro 2.1.3.0 (2021/12/06) and later QTS 4.5.4: QVR Guard 2.1.3.0 (2021/12/06) and later QTS 5.0.0: QVR Guard 2.1.3.0 (2021/12/06) and later

• CWE-120
• CWE-787

• https://www.qnap.com/en/security-advisory/qsa-21-59Vendor Advisory
• https://www.qnap.com/en/security-advisory/qsa-21-59Vendor Advisory

Published

Jan 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-38686An improper authentication vulnerability has been reported t…8.8
• CVE-2021-38687A stack buffer overflow vulnerability has been reported to a…9.8
• CVE-2021-38688An improper authentication vulnerability has been reported t…7.5
• CVE-2021-38689A stack buffer overflow vulnerability has been reported to a…9.8
• CVE-2021-3869corenlp is vulnerable to Improper Restriction of XML Externa…7.5
• CVE-2021-38690A stack buffer overflow vulnerability has been reported to a…9.8
• CVE-2021-38692A stack buffer overflow vulnerability has been reported to a…9.8
• CVE-2021-38693A path traversal vulnerability has been reported to affect Q…5.3
• CVE-2021-38694SoftVibe SARABAN for INFOMA 1.1 allows SQL Injection.7.5
• CVE-2021-38695SoftVibe SARABAN for INFOMA 1.1 is vulnerable to stored cros…5.4
• CVE-2021-38696SoftVibe SARABAN for INFOMA 1.1 has Incorrect Access Control…7.5
• CVE-2021-38697SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unres…9.8