First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-27588

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.6 build 20220401 and later

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
QNAP Systems Inc.	QVR	>= unspecified, < 5.1.6 build 20220401

References

Timeline

Published: May 5, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-27598.6Delta Electronics Delta Robot Automation Studio (DRAS) versions prior to 1.13.20 are affected by improper restrictions where the software pr CVE-2022-275926.7An unquoted search path or element vulnerability has been reported to affect QVR Smart Client. If exploited, the vulnerability could allow l CVE-2022-275939.1An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, Thi CVE-2022-275957.8An insecure library loading vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local CVE-2022-275969.8A vulnerability has been reported to affect QNAP device running QuTS hero, QTS. If exploited, this vulnerability allows remote attackers to CVE-2022-275972.7A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authent CVE-2022-275982.7A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authent CVE-2022-275994.4An insertion of sensitive information into Log file vulnerability has been reported to affect product. If exploited, the vulnerability possi CVE-2022-27604.3In affected versions of Octopus Deploy it is possible to reveal the Space ID of spaces that the user does not have access to view in an erro CVE-2022-276007.5An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vul CVE-2022-276078.1Bento4 1.6.0-639 has a heap-based buffer over-read in the AP4_HvccAtom class, a different issue than CVE-2018-14531.CVE-2022-276086.0Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows is vulnerable to registry key tampering by users with Administ

CVE-2022-27588: Critical severity, CVSS 9.8 | Vulnix