CVE-2024-50387
✓ Confirmed 0-Day
Triaged: March 5, 2026
4 articles
EPSS Score
Source: FIRST.org · 2026-05-24
23.45%
probability
This CVE has a 23.45% probability
of being exploited in the next 30 days.
0%
Top 96.0th percentile of all CVEs
100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE.
View on VulnerabilityLookup ↗
Attack Intelligence
Synology Urges Patch for Critical Zero-Click RCE Flaw Affecting Millions of NAS Devices
TheHackerNews
QNAP fixes seven NAS zero-day flaws exploited at Pwn2Own
BleepingComputer
Nov 07, 2025
QNAP patches second zero-day exploited at Pwn2Own to get root
BleepingComputer
Oct 30, 2024
Security Advisory 2024-115
CERT-EU
Oct 31, 2024
Signal Intelligence
Confidence
92%
EPSS
23.45%
Mentions
4
Last Seen
Nov 07, 2025
CNA Information
Analyst Note
CVE-2024-50387 is explicitly named as a zero-day exploited at Pwn2Own 2024, with QNAP issuing patches (SMB Service 4.15.002+) in response to active exploitation. Multiple authoritative sources confirm zero-day status and in-the-wild exploitation at the security conference, with patch availability coinciding with the disclosure.
Threat Actors 2
Hacking Team
apt_group
🇮🇹 IT
Mana Team
apt_group
🇨🇳 CN
Triage Info
Decided atMar 05, 2026