Read the docs

QNAP

Records682All Threatist records
Exploited (KEV)14In CISA KEV
CVSS critical101CVSS 9.0–10.0
CVSS high234CVSS 7.0–8.9

Exploited now

QNAP records in CISA KEV
TI-2023-25733 QNAP VioStor NVR OS Command Injection Vulnerability Priority CRITICAL 97KEV 2023-12-21TI-2022-10581 QNAP Photo Station Externally Controlled Reference Vulnerability Priority CRITICAL 100KEV 2022-09-08TI-2019-05100 QNAP Photo Station Improper Access Control Vulnerability Priority CRITICAL 100KEV 2022-06-08TI-2019-05101 QNAP QTS Improper Input Validation Vulnerability Priority CRITICAL 100KEV 2022-06-08TI-2019-05102 QNAP Photo Station Path Traversal Vulnerability Priority CRITICAL 100KEV 2022-06-08TI-2019-05103 QNAP Photo Station Path Traversal Vulnerability Priority CRITICAL 100KEV 2022-06-08

Components

Products in the NVD configurations · select one to filter the records
Qts 283 records CRITICAL Quts Hero 234 records CRITICAL Qsync Central 62 records MEDIUM Qutscloud 62 records HIGH File Station 57 records LOW Photo Station 26 records CRITICAL Video Station 21 records MEDIUM Media Streaming Add-on 13 records MEDIUM

Records

10 records in Qvr · all components

TI-2025-32893 CVE-2025-52856 · GHSA-fjh8-m5r5-9wrm

Improper authentication in QNAP VioStor

Priority MEDIUM 49

An improper authentication vulnerability has been reported to affect VioStor.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00656 Published 2025-08-29 Fixed in 5.1.6 build 20250621 CWE-287
TI-2022-10579 CVE-2022-27588 · GHSA-8cr8-x534-x73j

Vulnerability in QVR

Priority MEDIUM 45

We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.6 build 20220401 and later

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01362 Published 2022-05-05 Fixed in 5.1.6 build 20220401 CWE-77
TI-2021-16256 CVE-2021-38685 · GHSA-5647-h66r-5vj6

Command Injection Vulnerability in VioStor

Priority MEDIUM 45

A command injection vulnerability has been reported to affect QNAP device, VioStor.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01471 Published 2021-11-26 Fixed in QVR FW 5.1.6 build 20211109 CWE-78
TI-2021-13392 CVE-2021-34352 · GHSA-w526-38c2-jc6q

Command Injection Vulnerability in QVR

Priority MEDIUM 45

A command injection vulnerability has been reported to affect QNAP device running QVR.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01477 Published 2021-10-01 Fixed in 5.1.5 build 20210902 CWE-78
TI-2021-13391 CVE-2021-34351 · GHSA-grvw-7h5x-qrx9

Command Injection Vulnerability in QVR

Priority MEDIUM 45

A command injection vulnerability has been reported to affect QNAP device running QVR.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01471 Published 2021-09-27 Fixed in 5.1.5 build 20210803 CWE-78
TI-2021-13389 CVE-2021-34348 · GHSA-j4j5-p5q3-mfr7

Command Injection Vulnerability in QVR

Priority MEDIUM 45

A command injection vulnerability has been reported to affect QNAP device running QVR.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01471 Published 2021-09-27 Fixed in 5.1.5 build 20210803 CWE-78
TI-2021-16257 CVE-2021-38686 · GHSA-8qv9-29c6-9v3g

Improper Authentication Vulnerability in VioStor

Priority MEDIUM 40

An improper authentication vulnerability has been reported to affect QNAP device, VioStor.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00974 Published 2021-11-26 Fixed in QVR FW 5.1.6 build 20211109 CWE-287
TI-2021-13390 CVE-2021-34349 · GHSA-gh92-qxhf-5994

Command Injection Vulnerability in QVR

Priority LOW 35

A command injection vulnerability has been reported to affect QNAP device running QVR.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0145 Published 2021-09-27 Fixed in 5.1.5 build 20210803 CWE-78
TI-2023-09205 CVE-2023-23355 · GHSA-vf28-x3q6-9qg2

QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances), QVR

Priority LOW 34

An OS command injection vulnerability has been reported to affect QNAP operating systems.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01226 Published 2023-03-29 Fixed in 5.0.1.2346 build 20230322, 4.5.4.2374 build 20230416 +4 CWE-77
TI-2022-10584 CVE-2022-27597 · GHSA-gq7r-qxw5-w38c

QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)

Priority LOW 15

A vulnerability has been reported to affect QNAP operating systems.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00658 Published 2023-03-29 Fixed in 5.0.1.2346 build 20230322, h5.0.1.2348 build 20230324 CWE-125
Open these records in search →