Alert: New Vulnerabilities Discovered in QNAP and Kyocera Device Manager

The report summarizes disclosed vulnerabilities in Kyocera Device Manager (CVE-2023-50916) — an authentication coercion/path traversal issue that can force authentication to attacker-controlled SMB/UNC paths enabling credential capture or NTLM relay — and multiple QNAP product flaws including prototype pollution, XSS, command injection, SQL injection, and an unauthenticated RCE; vendors have released patches and users are advised to update.