Qcalagent (Qnap Systems Inc.) - vulnerabilities (CVEs)

5 CVEs, 1 in the last 30 days, 1 known versions, newest CVE from 2026-10-15. Vendor: Qnap Systems Inc..

CVEs of Qcalagent

• CVE-2026-41544 - CVSS 8.7 (high), 2026-10-15: A path traversal vulnerability has been reported to affect QcalAgent. If a remote attacker gains a user account, they can then exploit the vulnerability to…
• CVE-2024-27123 - CVSS 5.2 (medium), 2026-09-18: A cross-site scripting (XSS) vulnerability has been reported to affect QcalAgent. The local attackers can then exploit the vulnerability to bypass security…
• CVE-2023-41289 - CVSS 8.8 (high), 2024-01-05: An OS command injection vulnerability has been reported to affect QcalAgent. If exploited, the vulnerability could allow authenticated users to execute…
• CVE-2021-38678 - CVSS 6.1 (medium), 2022-01-14: An open redirect vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows attackers to redirect users…
• CVE-2021-38677 - CVSS 6.1 (medium), 2022-01-14: A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows remote attackers…