{"vulnerability": "CVE-2026-22896", "sightings": [{"uuid": "6e13fbb6-1aac-4fa1-8928-0fab75fe0141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22896", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117443706965945989", "content": "CVE-2026-22896 Stored XSS via Interface Name in Network & Virtual Switch App A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch. If a remote attacker gains an administrator account, they can then exploit the vulnerability to inject malicious code.\nWe have already fixed the vulnerability in the following version:Network & Virtual Switch in QTS 5.1.8.2823 build 20240712 and laterNetwork & Virtual Switch in QTS 5.2.1.2930 build 20241025 and laterNetwork & Virtual Switch in QuTS cloud c5.2.4.3041 build 20250211 and laterNetwork & Virtual Switch in QuTS hero h5.1.8.2823 build 20240712 and laterNetwork & Virtual Switch in QuTS hero h5.2.1.2929 build 20241025 and later\nhttps://www.cve.org/CVERecord?id=CVE-2026-22896https://www.qnap.com/en/release-notes/qts/5.1.8.2823/20240712https://www.qnap.com/en/release-notes/qts/5.2.1.2930/20241025https://www.qnap.com/en/release-notes/qutscloud/c5.2.4.3041/20250211https://www.qnap.com/en/release-notes/quts_hero/h5.1.8.2823/20240712https://www.qnap.com/en/release-notes/quts_hero/h5.2.1.2929/20241025#QNAPSystemsInc. #Network&VirtualSwitch#CVE_2026_22896#bot", "creation_timestamp": "2026-10-15T07:19:11.730207Z"}]}