CVE-2026-48947

MediumCVSS 4.9

Published: 07/07/2026(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

CVE-2026-48947 is an improper access check vulnerability that allows privileged users to overwrite media files without having the required editing permissions.

Risk Assessment

The organization risks unauthorized modification or deletion of media files by privileged users, potentially leading to data loss or content integrity breaches.

Recommendation

Update the system to the latest version that includes a fix for the access control flaw, and review and adjust user permissions accordingly.

Other vulnerabilities in MediaLibrary

CVE-2017-10700Critical
In the medialibrary component in QNAP NAS version 4.3.3.0229, an unauthenticated remote attacker can execute arbitrary system commands as the root user of the NAS application.

Original NVD description (English source)

An improper access check allows privileged users to overwrite media files without editing permissions.