Medium · published January 2, 2026
An out-of-bounds read vulnerability has been reported to affect License Center. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data.
We have already fixed the vulnerability in the following version:
License Center 2.0.36 and later
| Product | Versions | Fixed in |
|---|---|---|
| qnap/license_center | ≥ 2.0.17, < 2.0.36 | 2.0.36 |