CVE-2023-32976 (published 2023-10-13T19:16:54.607Z)
An OS command injection vulnerability has been reported to affect Container Station. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.

We have already fixed the vulnerability in the following version:
Container Station 2.6.7.44 and later

Affected products: Vendor: QNAP Systems Inc.
Product: Container Station
Versions: 2.6.x.x