{"vulnerability": "CVE-2026-34006", "sightings": [{"uuid": "c7242ac7-f5f6-4a5b-b836-e853842d2d72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34006", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117444273214937395", "content": "CVE-2026-34006 Pre-Authentication Multiple Critical Vulnerabilities in QNAP sMedioDTCPServer A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE. If exploited, the vulnerability could allow remote attackers to gain access to the system.\nWe have already fixed the vulnerability in the following version:sMedio DTCP MOVE 1.4.5 and later\nhttps://www.cve.org/CVERecord?id=CVE-2026-34006https://www.qnap.com/en/app-release-notes?keyword=sMedio&app=sMedioDTCPServer&product-line=nas#QNAPSystemsInc. #sMedioDTCPMOVE#CVE_2026_34006#bot", "creation_timestamp": "2026-10-15T09:43:12.073849Z"}, {"uuid": "1be60b87-797a-47e6-8b6a-fa059528b1ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34006", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxvzmhdoi32o", "content": "\ud83d\udea8 CVE-2026-34006 \u2014 CVSS 9.3 CRITICAL\n\nA missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE. ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-34006\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-15T12:07:39.293324Z"}, {"uuid": "a36ca3cb-e91f-4147-b7bf-380741caa82e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34006", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxw67tqjbd2x", "content": "CVE-2026-34006 - smedio dtcp move\nThe sMedio DTCP MOVE component in QNAP devices lets anyone on the network connect to the system because it does not check credentials. This could let a remote attacker view or control\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#qnap #CVE #infosec", "creation_timestamp": "2026-10-15T13:30:04.875558Z"}]}