Important Notes

• For instructions on updating QES to the latest version, open the following link. https://www.qnap.com/en/how-to/faq/article/my-nas-is-running-an-older-version-of-qes-can-i-update-to-the-latest-version-directly-what-sequence-should-i-follow-when-updating-qes
• For release note history, open the following link. https://www.qnap.com/en/releasenotes_qes/

Fixed Issues

• Fixed a security vulnerability in the XML-RPC service that could allow unauthenticated remote attackers to execute arbitrary code. (CVE-2026-95543)
• Fixed a security vulnerability that could allow unauthenticated remote attackers to execute arbitrary commands on the system. (CVE-2026-95542)