Read the docs

QNAP

Records682All Threatist records
Exploited (KEV)14In CISA KEV
CVSS critical101CVSS 9.0–10.0
CVSS high234CVSS 7.0–8.9

Exploited now

QNAP records in CISA KEV
TI-2023-25733 QNAP VioStor NVR OS Command Injection Vulnerability Priority CRITICAL 97KEV 2023-12-21TI-2022-10581 QNAP Photo Station Externally Controlled Reference Vulnerability Priority CRITICAL 100KEV 2022-09-08TI-2019-05100 QNAP Photo Station Improper Access Control Vulnerability Priority CRITICAL 100KEV 2022-06-08TI-2019-05101 QNAP QTS Improper Input Validation Vulnerability Priority CRITICAL 100KEV 2022-06-08TI-2019-05102 QNAP Photo Station Path Traversal Vulnerability Priority CRITICAL 100KEV 2022-06-08TI-2019-05103 QNAP Photo Station Path Traversal Vulnerability Priority CRITICAL 100KEV 2022-06-08

Components

Products in the NVD configurations · select one to filter the records
Qts 283 records CRITICAL Quts Hero 234 records CRITICAL Qsync Central 62 records MEDIUM Qutscloud 62 records HIGH File Station 57 records LOW Photo Station 26 records CRITICAL Video Station 21 records MEDIUM Media Streaming Add-on 13 records MEDIUM

Records

8 records in Qulog Center · all components

TI-2024-32562 CVE-2024-48862 · GHSA-9xq2-9jc3-2mjw

Link following in QNAP QuLog Center

Priority MEDIUM 41

A link following vulnerability has been reported to affect QuLog Center.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00921 Published 2024-11-22 Fixed in 1.7.0.831 ( 2024/10/15 ), 1.8.0.888 ( 2024/10/15 ) CWE-59
TI-2023-09204 CVE-2023-23354 · GHSA-3xqq-74gp-f73g

Cross-site scripting in QNAP QuLog Center

Priority MEDIUM 40

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.0054 Published 2024-12-19 Fixed in 1.5.0.738 ( 2023/03/06 ), 1.4.1.691 ( 2023/03/01 ) +1 CWE-79
TI-2024-21636 CVE-2024-32762 · GHSA-3vff-2vjg-jh5h

Cross-site scripting in QNAP QuLog Center

Priority LOW 35

A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00255 Published 2024-09-06 Fixed in 1.8.0.872 ( 2024/06/17 ), 1.7.0.827 ( 2024/06/17 ) CWE-79
TI-2020-18516 CVE-2020-36196 · GHSA-8vmw-c4hx-3j5r

Stored XSS Vulnerability in QuLog Center

Priority LOW 28

A stored XSS vulnerability has been reported to affect QNAP NAS running QuLog Center.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00581 Published 2021-07-01 Fixed in 1.2.0 CWE-80
TI-2024-35894 CVE-2024-53696 · GHSA-q469-433j-8xc2

Server-side request forgery in QNAP QuLog Center

Priority LOW 24

A server-side request forgery (SSRF) vulnerability has been reported to affect QuLog Center.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00445 Published 2025-03-07 Fixed in 1.7.0.829 ( 2024/10/01 ), 1.8.0.888 ( 2024/10/15 ) +2 CWE-918
TI-2023-09207 CVE-2023-23357 · GHSA-77mp-jg87-qc6g

Cross-site scripting in QNAP QuLog Center

Priority LOW 22

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00363 Published 2024-12-19 Fixed in 1.5.0.738 ( 2023/03/06 ), 1.4.1.691 ( 2023/03/01 ) +1 CWE-79
TI-2025-34011 CVE-2025-54168 · GHSA-qgw9-46r7-vc44

Cross-site scripting in QNAP QuLog Center

Priority LOW 11

A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center.

CVSS 4.0LOW 2.2 Network High privileges User interaction EPSS 0.00229 Published 2025-11-07 Fixed in 1.8.2.923 ( 2025/08/27 ) CWE-79
TI-2025-36226 CVE-2025-58469 · GHSA-rmvm-jpvw-wv6p

Cross-site request forgery in QNAP QuLog Center

Priority LOW 7

A cross-site request forgery (CSRF) vulnerability has been reported to affect QuLog Center.

CVSS 4.0LOW 1.2 Network No auth User interaction EPSS 0.00262 Published 2025-11-07 Fixed in 1.8.2.927 ( 2025/09/17 ) CWE-352
Open these records in search →