[qnap]

July 23, 2026

• QNAP File Station RCE via non-control-data exploitation. strcpy() stack overflows let researchers manipulate upload IDs into arbitrary file deletion and remote code execution (SySS). · Vulnerabilities & Exploits

in "Every Frontier Model Tried to Cheat": UK Safety Institute Puts Numbers Behind the OpenAI–Hugging Face Incident