QNAP has patched a critical vulnerability, tracked as CVE-2024-50388, that was exploited to hack a TS-464 NAS device during the Pwn2Own Ireland 2024 competition. This vulnerability pertains to OS command injection within HBS 3 Hybrid Backup Sync version 25.1.x, which is QNAP's solution for disaster recovery and data backup.
