Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

234 records

Vendor: QNAP Component: Quts Hero Clear all filters
TI-2026-19930 CVE-2026-24719 · GHSA-8fh7-4j6j-cx8g

OS command injection in QNAP QTS

Priority LOW 31

A command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 6.1 Network High privileges No interaction EPSS 0.00977 Published 2026-06-10 Fixed in 5.2.9.3492 build 20260507, h5.2.9.3499 build 20260514 CWE-78
TI-2026-19929 CVE-2026-24717 · GHSA-jhw8-2xh3-xhmf

Path traversal in QNAP QTS

Priority LOW 8

A path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0LOW 1.2 Network High privileges No interaction EPSS 0.00393 Published 2026-06-10 Fixed in 5.2.9.3492 build 20260507, h5.2.9.3499 build 20260514 +2 CWE-22
TI-2026-19928 CVE-2026-24716 · GHSA-9vf8-xh83-h327

NULL pointer dereference in QNAP QTS

Priority LOW 8

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0LOW 1.2 Network High privileges No interaction EPSS 0.00331 Published 2026-06-10 Fixed in 5.2.9.3492 build 20260507, h5.2.9.3499 build 20260514 +2 CWE-476
TI-2026-18381 CVE-2026-22893 · GHSA-m6jc-8x3p-vxfx

OS command injection in QNAP QTS

Priority MEDIUM 41

A command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01089 Published 2026-06-10 Fixed in 5.2.9.3410 build 20260214, h5.2.9.3410 build 20260214 +2 CWE-78
TI-2025-40759 CVE-2025-66281 · GHSA-hjv6-9pr5-j6w8

NULL pointer dereference in QNAP QTS

Priority LOW 37

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00456 Published 2026-06-10 Fixed in 5.2.9.3410 build 20260214, h5.2.9.3410 build 20260214 +2 CWE-476
TI-2025-40758 CVE-2025-66280 · GHSA-25q9-p4j4-6rj7

Stack-based buffer overflow in QNAP QTS

Priority LOW 24

An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00436 Published 2026-06-10 Fixed in 5.2.9.3410 build 20260214, h5.2.9.3410 build 20260214 +2 CWE-121
TI-2025-40757 CVE-2025-66279 · GHSA-vpcm-92g9-vgwx

OS command injection in QNAP QTS

Priority MEDIUM 41

A command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01051 Published 2026-06-10 Fixed in 5.2.9.3410 build 20260214, h5.2.9.3410 build 20260214 +2 CWE-78
TI-2025-40752 CVE-2025-66273 · GHSA-8g9p-fvw8-cwm4

OS command injection in QNAP QTS

Priority MEDIUM 41

A command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01051 Published 2026-06-10 Fixed in 5.2.9.3410 build 20260214, h5.2.9.3410 build 20260214 +2 CWE-78
TI-2025-39003 CVE-2025-62850 · GHSA-53hc-rhp5-vgx7

NULL Pointer Dereference in networkRequest.cgi

Priority LOW 24

A NULL pointer dereference vulnerability has been reported to affect QTS, QVP, QuTS cloud and QuTS hero.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00436 Published 2026-06-10 Fixed in 5.2.9.3410 build 20260214, 2.7.4 +4 CWE-476
TI-2025-39011 CVE-2025-62858 · GHSA-prxr-642c-c266

Stack-based buffer overflow in QNAP QTS

Priority LOW 24

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00445 Published 2026-06-09 Fixed in 5.2.9.3410 build 20260214, h5.2.9.3410 build 20260214 +2 CWE-121
TI-2026-30112 CVE-2026-41539 · GHSA-hc5c-8r54-29r3

Cross-site scripting in QNAP QTS

Priority LOW 29

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 6.3 Network No auth User interaction EPSS 0.00193 Published 2026-06-09 Fixed in 5.2.9.3492 build 20260507, h5.2.9.3499 build 20260514 +2 CWE-79
TI-2024-13020 CVE-2024-14026 · GHSA-jpfg-j56h-r5vw

OS command injection in QNAP QTS

Priority LOW 14

A command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0LOW 2.0 Physical Low privileges User interaction EPSS 0.00688 Published 2026-03-11 Fixed in 5.1.9.2954 build 20241120, 5.2.3.3006 build 20250108 +2 CWE-78
TI-2025-29776 CVE-2025-47205 · GHSA-w44h-2j78-hvfm

NULL pointer dereference in QNAP QTS

Priority LOW 24

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00455 Published 2026-02-11 Fixed in 5.2.8.3332 build 20251128, h5.2.8.3321 build 20251117 CWE-476
TI-2025-30947 CVE-2025-48725 · GHSA-36h4-32cj-m84w

Buffer overflow in QNAP QuTS hero

Priority LOW 6

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0LOW 0.6 Network Low privileges No interaction EPSS 0.00473 Published 2026-02-11 Fixed in h5.3.2.3354 build 20251225 CWE-120
TI-2025-36945 CVE-2025-59386 · GHSA-xmr6-mm5f-8mf2

NULL pointer dereference in QNAP QuTS hero

Priority LOW 14

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0LOW 1.2 Network High privileges No interaction EPSS 0.00439 Published 2026-02-11 Fixed in h5.3.2.3354 build 20251225 CWE-476
TI-2025-40753 CVE-2025-66274 · GHSA-vf98-8xxx-fp8w

NULL pointer dereference in QNAP QTS

Priority LOW 24

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00439 Published 2026-02-11 Fixed in 5.2.9.3410 build 20260214, h5.2.9.3410 build 20260214 +2 CWE-476
TI-2025-40755 CVE-2025-66277 · GHSA-3wh2-2wc5-f45w

Link following in QNAP QTS

Priority MEDIUM 49

A link following vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00702 Published 2026-02-11 Fixed in 5.2.8.3350 build 20251216, h5.3.2.3354 build 20251225 +1 CWE-59
TI-2025-39005 CVE-2025-62852 · GHSA-vjhv-9hfj-67mh

QTS, QuTS hero

Priority LOW 8

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0LOW 1.2 Network High privileges No interaction EPSS 0.00362 Published 2026-01-02 Fixed in 5.2.8.3332 build 20251128 CWE-121
TI-2025-36940 CVE-2025-59381 · GHSA-fj3g-cqvg-f3jx

Path traversal in QNAP QTS

Priority LOW 31

A path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00466 Published 2026-01-02 Fixed in 5.2.8.3332 build 20251128, h5.2.8.3321 build 20251117 +1 CWE-22
TI-2025-36939 CVE-2025-59380 · GHSA-74xj-22j3-mfhw

Path traversal in QNAP QTS

Priority LOW 22

A path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 4.6 Network High privileges No interaction EPSS 0.00578 Published 2026-01-02 Fixed in 5.2.8.3332 build 20251128, h5.2.8.3321 build 20251117 CWE-22
TI-2025-30943 CVE-2025-48721 · GHSA-cm78-px7f-5m69

QTS, QuTS hero

Priority LOW 8

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0LOW 1.2 Network High privileges No interaction EPSS 0.00428 Published 2026-01-02 Fixed in 5.2.8.3332 build 20251128 CWE-120
TI-2025-08352 CVE-2025-9110 · GHSA-xhj9-wqh5-g6hq

An exposure of sensitive system information to an unauthorized control sphere…

Priority LOW 14

An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0LOW 2.7 Network No auth No interaction EPSS 0.00453 Published 2026-01-02 Fixed in 5.2.8.3332 build 20251128, h5.2.8.3321 build 20251117 +1 CWE-497
TI-2025-35612 CVE-2025-57705 · GHSA-qrcf-84cj-mgmg

Resource allocation without limits in QNAP QTS

Priority LOW 21

An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 4.6 Network High privileges No interaction EPSS 0.00357 Published 2026-01-02 Fixed in 5.2.7.3256 build 20250913, h5.2.7.3256 build 20250913 +1 CWE-770
TI-2025-34009 CVE-2025-54166 · GHSA-xj99-2m32-jhvv

Out-of-bounds read in QNAP QTS

Priority LOW 21

An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 4.6 Network High privileges No interaction EPSS 0.00339 Published 2026-01-02 Fixed in 5.2.7.3256 build 20250913, h5.2.7.3256 build 20250913 +1 CWE-125
Load more