Read the docs

QNAP

Records682All Threatist records
Exploited (KEV)14In CISA KEV
CVSS critical101CVSS 9.0–10.0
CVSS high234CVSS 7.0–8.9

Exploited now

QNAP records in CISA KEV
TI-2023-25733 QNAP VioStor NVR OS Command Injection Vulnerability Priority CRITICAL 97KEV 2023-12-21TI-2022-10581 QNAP Photo Station Externally Controlled Reference Vulnerability Priority CRITICAL 100KEV 2022-09-08TI-2019-05100 QNAP Photo Station Improper Access Control Vulnerability Priority CRITICAL 100KEV 2022-06-08TI-2019-05101 QNAP QTS Improper Input Validation Vulnerability Priority CRITICAL 100KEV 2022-06-08TI-2019-05102 QNAP Photo Station Path Traversal Vulnerability Priority CRITICAL 100KEV 2022-06-08TI-2019-05103 QNAP Photo Station Path Traversal Vulnerability Priority CRITICAL 100KEV 2022-06-08

Components

Products in the NVD configurations · select one to filter the records
Qts 283 records CRITICAL Quts Hero 234 records CRITICAL Qsync Central 62 records MEDIUM Qutscloud 62 records HIGH File Station 57 records LOW Photo Station 26 records CRITICAL Video Station 21 records MEDIUM Media Streaming Add-on 13 records MEDIUM

Records

57 records in File Station · all components

TI-2025-24025 CVE-2025-33031 · GHSA-q2xg-9r3q-9vc3

Improper certificate validation in QNAP File Station 5

Priority LOW 36

An improper certificate validation vulnerability has been reported to affect File Station 5.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00275 Published 2025-06-06 Fixed in 5.5.6.4847 CWE-295
TI-2025-21598 CVE-2025-30279 · GHSA-r62w-v23r-pqcm

Improper certificate validation in QNAP File Station 5

Priority LOW 36

An improper certificate validation vulnerability has been reported to affect File Station 5.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00275 Published 2025-06-06 Fixed in 5.5.6.4847 CWE-295
TI-2025-21273 CVE-2025-29885 · GHSA-mf8r-m6vx-6fff

Improper certificate validation in QNAP File Station 5

Priority LOW 36

An improper certificate validation vulnerability has been reported to affect File Station 5.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00275 Published 2025-06-06 Fixed in 5.5.6.4791 CWE-295
TI-2025-21272 CVE-2025-29884 · GHSA-ffr6-2835-468g

Improper certificate validation in QNAP File Station 5

Priority LOW 36

An improper certificate validation vulnerability has been reported to affect File Station 5.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00275 Published 2025-06-06 Fixed in 5.5.6.4791 CWE-295
TI-2025-21271 CVE-2025-29883 · GHSA-q4ww-5c58-73px

Improper certificate validation in QNAP File Station 5

Priority LOW 36

An improper certificate validation vulnerability has been reported to affect File Station 5.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00275 Published 2025-06-06 Fixed in 5.5.6.4791 CWE-295
TI-2026-19932 CVE-2026-24724 · GHSA-q4p9-vcgx-vmc3

Incorrect authorization in QNAP File Station 5

Priority LOW 34

An incorrect authorization vulnerability has been reported to affect File Station 6.

CVSS 4.0MEDIUM 6.2 Network Low privileges No interaction EPSS 0.00337 Published 2026-06-10 Fixed in 5.5.6.5243 CWE-863
TI-2025-24029 CVE-2025-33035 · GHSA-jx35-w4qq-q9ph

Path traversal in QNAP File Station 5

Priority LOW 32

A path traversal vulnerability has been reported to affect File Station 5.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00586 Published 2025-06-06 Fixed in 5.5.6.4847 CWE-22
TI-2025-21285 CVE-2025-29900 · GHSA-cqj3-hx44-5vjh

Resource allocation without limits in QNAP File Station 5

Priority LOW 32

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0046 Published 2025-08-29 Fixed in 5.5.6.4907 CWE-770
TI-2025-21284 CVE-2025-29899 · GHSA-mrr7-x6j8-vmq6

Resource allocation without limits in QNAP File Station 5

Priority LOW 32

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0046 Published 2025-08-29 Fixed in 5.5.6.4907 CWE-770
TI-2025-21278 CVE-2025-29890 · GHSA-rvp8-h4pc-q495

Resource allocation without limits in QNAP File Station 5

Priority LOW 32

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0046 Published 2025-08-29 Fixed in 5.5.6.4907 CWE-770
TI-2025-21265 CVE-2025-29875 · GHSA-x97m-jxjf-rrv4

NULL pointer dereference in QNAP File Station 5

Priority LOW 32

A NULL pointer dereference vulnerability has been reported to affect File Station 5.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0046 Published 2025-08-29 Fixed in 5.5.6.4907 CWE-476
TI-2025-21262 CVE-2025-29872 · GHSA-x72h-c6gg-qx5w

Resource allocation without limits in QNAP File Station 5

Priority LOW 32

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00452 Published 2025-06-06 Fixed in 5.5.6.4847 CWE-770
TI-2025-29777 CVE-2025-47206 · GHSA-5h3x-76q4-jhh6

Out-of-bounds write in QNAP File Station 5

Priority LOW 31

An out-of-bounds write vulnerability has been reported to affect File Station 5.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00384 Published 2025-08-18 Fixed in 5.5.6.4933 CWE-787
TI-2025-21286 CVE-2025-29901 · GHSA-whx8-r54w-7gjm

NULL pointer dereference in QNAP File Station 5

Priority LOW 31

A NULL pointer dereference vulnerability has been reported to affect File Station 5.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00373 Published 2025-08-26 Fixed in 5.5.6.4933 CWE-476
TI-2025-16376 CVE-2025-22486 · GHSA-4m6f-x2gc-6fgq

Improper certificate validation in QNAP File Station 5

Priority LOW 31

An improper certificate validation vulnerability has been reported to affect File Station 5.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00275 Published 2025-06-06 Fixed in 5.5.6.4791 CWE-295
TI-2026-21228 CVE-2026-26239 · GHSA-82g9-7jh6-77wg

Stack-based buffer overflow in QNAP File Station 5

Priority LOW 30

A buffer overflow vulnerability has been reported to affect File Station 5.

CVSS 4.0MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00421 Published 2026-06-10 Fixed in 5.5.6.5208 CWE-121
TI-2025-39006 CVE-2025-62853 · GHSA-g4c6-xx88-2hqq

Path traversal in QNAP File Station 5

Priority LOW 27

A path traversal vulnerability has been reported to affect File Station 5.

CVSS 4.0MEDIUM 5.2 Network Low privileges No interaction EPSS 0.00663 Published 2026-02-11 Fixed in 5.5.6.5166 CWE-22
TI-2026-74606 CVE-2026-24723 · GHSA-57mw-7fjr-r57f

NULL Pointer Dereference in utilRequest.cgi

Priority LOW 24

A NULL pointer dereference vulnerability has been reported to affect File Station 5.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0028 Published 2026-10-15 Fixed in 5.5.6.5243 CWE-476
TI-2025-29778 CVE-2025-47207 · GHSA-rxrq-fx2p-jjc3

NULL pointer dereference in QNAP File Station 5

Priority LOW 24

A NULL pointer dereference vulnerability has been reported to affect several product versions.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00364 Published 2025-11-07 Fixed in 5.5.6.5018 CWE-476
TI-2025-21277 CVE-2025-29889 · GHSA-qvc3-rc3f-hxc2

NULL pointer dereference in QNAP File Station 5

Priority LOW 24

A NULL pointer dereference vulnerability has been reported to affect File Station 5.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0046 Published 2025-08-29 Fixed in 5.5.6.4907 CWE-476
TI-2025-21276 CVE-2025-29888 · GHSA-8r69-mgc2-3cmc

NULL pointer dereference in QNAP File Station 5

Priority LOW 24

A NULL pointer dereference vulnerability has been reported to affect File Station 5.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0046 Published 2025-08-29 Fixed in 5.5.6.4907 CWE-476
TI-2025-21274 CVE-2025-29886 · GHSA-3w9r-7m69-42xv

NULL pointer dereference in QNAP File Station 5

Priority LOW 24

A NULL pointer dereference vulnerability has been reported to affect File Station 5.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0046 Published 2025-08-29 Fixed in 5.5.6.4907 CWE-476
Load more
Open these records in search →