CVE-2022-27593Vulnerability

QNAP Photo Station Externally Controlled Reference Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on 8 Sep 2022.

Reported by 1 independent source · first reported 19 Oct 2022 by Group-IB · last reported 19 Oct 2022

Last reported 4 years ago

CISA KEVAdded 8 Sep 2022
Fix due 29 Sep 2022
Used by ransomware: knownCISA KEV catalogue

EPSS87.9%
higher than 99% of CVEsFIRST EPSS, as of 23 Oct 2026

What the reports say

1 report, newest first · the exact sentence from each

“In early September 2022, QNAP released another security alert about attacks featuring DeadBolt ransomware (CVE-2022-27593).”

Group-IBVendor19 Oct 2022
Deadbolt ransomware decryption: unlock your data

named in the same reports

Copy these 2 indicators · defanged

2 indicators, defanged, one per line

deadbolt[.]pid
rand[.]read

Thanks — we review every report.

Report a wrong value