CVE-2024-50388
✓ Confirmed 0-Day
Triaged: March 5, 2026
4 articles
EPSS Score
Source: FIRST.org · 2026-05-24
7.93%
probability
This CVE has a 7.93% probability
of being exploited in the next 30 days.
0%
Top 92.1th percentile of all CVEs
100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE.
View on VulnerabilityLookup ↗
Attack Intelligence
Synology Urges Patch for Critical Zero-Click RCE Flaw Affecting Millions of NAS Devices
TheHackerNews
QNAP fixes seven NAS zero-day flaws exploited at Pwn2Own
BleepingComputer
Nov 07, 2025
QNAP fixes NAS backup software zero-day exploited at Pwn2Own
BleepingComputer
Oct 29, 2024
Security Advisory 2024-115
CERT-EU
Oct 31, 2024
Signal Intelligence
Confidence
92%
EPSS
7.93%
Mentions
4
Last Seen
Nov 07, 2025
CNA Information
Analyst Note
CVE-2024-50388 was explicitly identified as a zero-day exploited at Pwn2Own 2024 (a live hacking competition). Multiple authoritative sources (BleepingComputer, CERT-EU) confirm zero-day exploitation, and QNAP released patches (v25.1.1.673+) in response to active exploitation at the event in December 2024, demonstrating exploitation preceded or coincided with patch availability.
Threat Actors 2
Hacking Team
apt_group
🇮🇹 IT
Mana Team
apt_group
🇨🇳 CN
Triage Info
Decided atMar 05, 2026