Read the docs

QNAP

Records682All Threatist records
Exploited (KEV)14In CISA KEV
CVSS critical101CVSS 9.0–10.0
CVSS high234CVSS 7.0–8.9

Exploited now

QNAP records in CISA KEV
TI-2023-25733 QNAP VioStor NVR OS Command Injection Vulnerability Priority CRITICAL 97KEV 2023-12-21TI-2022-10581 QNAP Photo Station Externally Controlled Reference Vulnerability Priority CRITICAL 100KEV 2022-09-08TI-2019-05100 QNAP Photo Station Improper Access Control Vulnerability Priority CRITICAL 100KEV 2022-06-08TI-2019-05101 QNAP QTS Improper Input Validation Vulnerability Priority CRITICAL 100KEV 2022-06-08TI-2019-05102 QNAP Photo Station Path Traversal Vulnerability Priority CRITICAL 100KEV 2022-06-08TI-2019-05103 QNAP Photo Station Path Traversal Vulnerability Priority CRITICAL 100KEV 2022-06-08

Components

Products in the NVD configurations · select one to filter the records
Qts 283 records CRITICAL Quts Hero 234 records CRITICAL Qsync Central 62 records MEDIUM Qutscloud 62 records HIGH File Station 57 records LOW Photo Station 26 records CRITICAL Video Station 21 records MEDIUM Media Streaming Add-on 13 records MEDIUM

Records

234 records in Quts Hero · all components

TI-2020-02221 CVE-2020-2509 · GHSA-77jf-5mcg-g6m9

Command Injection Vulnerability in QTS and QuTS hero

Priority CRITICAL 100KEV

A command injection vulnerability has been reported to affect QTS and QuTS hero.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.33987 Published 2021-04-17 Fixed in 4.5.2.1566 Build 20210202, 4.5.1.1495 Build 20201123 +5 CWE-77
TI-2023-25536 CVE-2023-47218 · GHSA-j269-5p85-wxpq

Command injection in QNAP QTS

Priority HIGH 79

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 8.3 Network No auth No interaction EPSS 0.8992 Published 2024-02-13 Fixed in 5.1.5.2645 build 20240116, 4.x +3 CWE-77
TI-2024-35889 CVE-2024-53691 · GHSA-6hfr-hxpf-c7m6

Link following in QNAP QTS

Priority HIGH 73

A link following vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.23758 Published 2024-12-06 Fixed in 5.1.8.2823 build 20240712, 5.2.0.2802 build 20240620 +2 CWE-59
TI-2024-17986 CVE-2024-27130 · GHSA-c3mm-2w2h-vx43

Buffer overflow in QNAP QTS

Priority HIGH 73

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.3752 Published 2024-05-21 Fixed in 5.1.7.2770 build 20240520, h5.1.7.2770 build 20240520 CWE-120
TI-2024-14559 CVE-2024-21899 · GHSA-mfjq-7ffc-qgmv

Improper authentication in QNAP QTS

Priority HIGH 70

An improper authentication vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.24365 Published 2024-03-08 Fixed in 5.1.3.2578 build 20231110, 4.5.4.2627 build 20231225 +3 CWE-287
TI-2023-09214 CVE-2023-23368 · GHSA-vccx-mhx2-8xvf

OS command injection in QNAP QTS

Priority HIGH 67

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.18363 Published 2023-11-03 Fixed in 5.0.1.2376 build 20230421, 4.5.4.2374 build 20230416 +3 CWE-78
TI-2023-28022 CVE-2023-51364 · GHSA-pvq7-259f-j6f4

Path traversal in QNAP QTS

Priority HIGH 65

A path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.39663 Published 2024-04-26 Fixed in 5.1.4.2596 build 20231128, 4.5.4.2627 build 20231225 +3 CWE-22
TI-2023-28023 CVE-2023-51365 · GHSA-p7j9-7qwr-c4hr

Path traversal in QNAP QTS

Priority MEDIUM 63

A path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.34818 Published 2024-04-26 Fixed in 5.1.4.2596 build 20231128, 4.5.4.2627 build 20231225 +3 CWE-22
TI-2023-24080 CVE-2023-45026 · GHSA-vg4f-g292-cmwp

Path traversal in QNAP QTS

Priority MEDIUM 58

A path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00454 Published 2024-02-02 Fixed in 5.1.5.2645 build 20240116, h5.1.5.2647 build 20240118 +1 CWE-22
TI-2022-10583 CVE-2022-27596 · GHSA-xj35-32mv-jpmp

Vulnerability in QTS

Priority MEDIUM 54

A vulnerability has been reported to affect QNAP device running QuTS hero, QTS.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02663 Published 2023-01-30 Fixed in h5.0.1.2248 build 20221215, 5.0.1.2234 build 20221201 CWE-89
TI-2024-21640 CVE-2024-32766 · GHSA-j64h-79xv-rx9g

Command injection in QNAP QTS

Priority MEDIUM 53

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02315 Published 2024-04-26 Fixed in 5.1.3.2578 build 20231110, 4.5.4.2627 build 20231225 +3 CWE-77
TI-2025-40755 CVE-2025-66277 · GHSA-3wh2-2wc5-f45w

Link following in QNAP QTS

Priority MEDIUM 49

A link following vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00702 Published 2026-02-11 Fixed in 5.2.8.3350 build 20251216, h5.3.2.3354 build 20251225 +1 CWE-59
TI-2024-33826 CVE-2024-50393 · GHSA-59xx-9g47-6hc5

OS command injection in QNAP QTS

Priority MEDIUM 48

A command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.0131 Published 2024-12-06 Fixed in 5.1.9.2954 build 20241120, 5.2.2.2950 build 20241114 +4 CWE-78
TI-2023-20447 CVE-2023-39303 · GHSA-pg7w-g93j-pc6j

Improper authentication in QNAP QTS

Priority MEDIUM 48

An improper authentication vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00469 Published 2024-02-02 Fixed in 5.1.3.2578 build 20231110, h5.1.3.2578 build 20231110 +1 CWE-287
TI-2024-17983 CVE-2024-27127 · GHSA-h69v-wwmx-68xj

Double free in QNAP QTS

Priority MEDIUM 47

A double free vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00696 Published 2024-05-21 Fixed in 5.1.7.2770 build 20240520, h5.1.7.2770 build 20240520 CWE-415
TI-2019-05105 CVE-2019-7198 · GHSA-rxjr-qfmr-c739

Command Injection Vulnerability in QTS and QuTS hero

Priority MEDIUM 47

This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02718 Published 2020-12-10 Fixed in 4.5.1.1456, 4.4.3.1354 CWE-77
TI-2021-09796 CVE-2021-28804 · GHSA-8p34-xr7p-88q2

Command Injection Vulnerabilities in QTS and QuTS hero

Priority MEDIUM 46

A command injection vulnerabilities have been reported to affect QTS and QuTS hero.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01816 Published 2021-07-01 Fixed in 4.5.1.1540 build 20210107, h4.5.1.1582 build 20210217 CWE-78
TI-2021-09794 CVE-2021-28802 · GHSA-777p-2jpw-g9gh

Command Injection Vulnerabilities in QTS and QuTS hero

Priority MEDIUM 46

A command injection vulnerabilities have been reported to affect QTS and QuTS hero.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01816 Published 2021-07-01 Fixed in 4.5.1.1540 build 20210107, h4.5.1.1582 build 20210217 CWE-78
TI-2025-39001 CVE-2025-62848 · GHSA-7vwr-42wj-qjpw

NULL pointer dereference in QNAP QTS

Priority MEDIUM 45

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0HIGH 8.1 Network No auth No interaction EPSS 0.00862 Published 2025-12-16 Fixed in 5.2.7.3297 build 20251024, h5.2.7.3297 build 20251024 +1 CWE-476
TI-2023-24079 CVE-2023-45025 · GHSA-w4qh-vg3x-929v

Command injection in QNAP QTS

Priority MEDIUM 45

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01128 Published 2024-02-02 Fixed in 5.1.4.2596 build 20231128, 4.5.4.2627 build 20231225 +3 CWE-77
TI-2025-36944 CVE-2025-59385 · GHSA-xggh-gjh3-26r2

Authentication bypass by spoofing in QNAP QTS

Priority MEDIUM 44

An authentication bypass by spoofing vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0HIGH 8.1 Network No auth No interaction EPSS 0.00636 Published 2025-12-16 Fixed in 5.2.7.3297 build 20251024, h5.2.7.3297 build 20251024 +1 CWE-290
TI-2023-20441 CVE-2023-39297 · GHSA-x96x-gwv6-4324

OS command injection in QNAP QTS

Priority MEDIUM 43

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01405 Published 2024-02-02 Fixed in 5.1.4.2596 build 20231128, 4.5.4.2627 build 20231225 +3 CWE-78
TI-2023-09208 CVE-2023-23362 · GHSA-vw76-r5h7-p4w9

OS command injection in QNAP QTS

Priority MEDIUM 43

An OS command injection vulnerability has been reported to affect QNAP operating systems.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01597 Published 2023-09-22 Fixed in 5.0.1.2376 build 20230421, 4.5.4.2374 build 20230416 +3 CWE-78
TI-2020-15838 CVE-2020-25847 · GHSA-8q2c-xwcr-7mj4

Command Injection Vulnerability in QTS and QuTS hero

Priority MEDIUM 43

This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02581 Published 2020-12-29 Fixed in 4.5.1.1495, 4.3.x +2 CWE-77
Load more
Open these records in search →