Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: QNAP Systems QTS 5.2.9.3410 build 20260214 Clear all filters
TI-2026-18381 CVE-2026-22893 · GHSA-m6jc-8x3p-vxfx

OS command injection in QNAP QTS

Priority MEDIUM 41

A command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01089 Published 2026-06-10 Fixed in 5.2.9.3410 build 20260214, h5.2.9.3410 build 20260214 +2 CWE-78
TI-2025-40759 CVE-2025-66281 · GHSA-hjv6-9pr5-j6w8

NULL pointer dereference in QNAP QTS

Priority LOW 37

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00456 Published 2026-06-10 Fixed in 5.2.9.3410 build 20260214, h5.2.9.3410 build 20260214 +2 CWE-476
TI-2025-40758 CVE-2025-66280 · GHSA-25q9-p4j4-6rj7

Stack-based buffer overflow in QNAP QTS

Priority LOW 24

An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00436 Published 2026-06-10 Fixed in 5.2.9.3410 build 20260214, h5.2.9.3410 build 20260214 +2 CWE-121
TI-2025-40757 CVE-2025-66279 · GHSA-vpcm-92g9-vgwx

OS command injection in QNAP QTS

Priority MEDIUM 41

A command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01051 Published 2026-06-10 Fixed in 5.2.9.3410 build 20260214, h5.2.9.3410 build 20260214 +2 CWE-78
TI-2025-40752 CVE-2025-66273 · GHSA-8g9p-fvw8-cwm4

OS command injection in QNAP QTS

Priority MEDIUM 41

A command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01051 Published 2026-06-10 Fixed in 5.2.9.3410 build 20260214, h5.2.9.3410 build 20260214 +2 CWE-78
TI-2025-39003 CVE-2025-62850 · GHSA-53hc-rhp5-vgx7

NULL Pointer Dereference in networkRequest.cgi

Priority LOW 24

A NULL pointer dereference vulnerability has been reported to affect QTS, QVP, QuTS cloud and QuTS hero.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00436 Published 2026-06-10 Fixed in 5.2.9.3410 build 20260214, 2.7.4 +4 CWE-476