Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: QNAP Systems QTS 5.2.9.3492 build 20260507 Clear all filters
TI-2026-19930 CVE-2026-24719 · GHSA-8fh7-4j6j-cx8g

OS command injection in QNAP QTS

Priority LOW 31

A command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 6.1 Network High privileges No interaction EPSS 0.00977 Published 2026-06-10 Fixed in 5.2.9.3492 build 20260507, h5.2.9.3499 build 20260514 CWE-78
TI-2026-19929 CVE-2026-24717 · GHSA-jhw8-2xh3-xhmf

Path traversal in QNAP QTS

Priority LOW 8

A path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0LOW 1.2 Network High privileges No interaction EPSS 0.00393 Published 2026-06-10 Fixed in 5.2.9.3492 build 20260507, h5.2.9.3499 build 20260514 +2 CWE-22
TI-2026-19928 CVE-2026-24716 · GHSA-9vf8-xh83-h327

NULL pointer dereference in QNAP QTS

Priority LOW 8

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0LOW 1.2 Network High privileges No interaction EPSS 0.00331 Published 2026-06-10 Fixed in 5.2.9.3492 build 20260507, h5.2.9.3499 build 20260514 +2 CWE-476