CVE-2024-56807 Media Streaming add-on

Low 1.7 Published 11 Feb 2026 Updated 11 Feb 2026

An out-of-bounds read in the QNAP Media Streaming add-on allows local network attackers to obtain secret data.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2024-56807?

CVE-2024-56807 is a low-severity vulnerability in QNAP Systems Inc. Media Streaming add-on, published on 11 Feb 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An out-of-bounds read vulnerability has been reported to affect Media Streaming add-on. If an attacker gains local network access, they can then exploit the vulnerability to obtain secret data.

We have already fixed the vulnerability in the following version: Media Streaming add-on 500.1.1.6 ( 2024/08/02 ) and later

Weakness: CWE-125

Which versions are affected by CVE-2024-56807?

It affects 1 product.

Products include Qnap Media Streaming Add-On.

How do I fix CVE-2024-56807?

No fix has been published for CVE-2024-56807 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-56807 being exploited?

There is no known exploitation of CVE-2024-56807 in the wild and no public exploit code.

Sources

Also known as GHSA-h3fv-27fp-2c8j.