thumbnail QNAPping At The Wheel (CVE-2024-27130 and friends)