EIP-2026-111621

This exploit targets QNAP QTS and Photo Station versions before 4.4.1 and 6.0.3 respectively, leveraging multiple CVEs to achieve remote command execution via file read vulnerabilities. It extracts sensitive files like /etc/passwd and /etc/shadow by manipulating album and access code parameters.