Qts (Qnap Systems Inc.) - vulnerabilities (CVEs)

226 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-09-18. Vendor: Qnap Systems Inc..

CVEs of Qts

CVE-2024-38639 - CVSS 4.8 (medium), 2026-09-18: An improper authentication vulnerability has been reported to affect product. The remote attackers can then exploit the vulnerability to compromise the…
CVE-2026-24719 - CVSS 7.2 (high), 2026-06-10: A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account,…
CVE-2026-24717 - CVSS 6.5 (medium), 2026-06-10: A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they…
CVE-2026-24716 - CVSS 7.2 (high), 2026-06-10: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2026-22893 - CVSS 8.6 (high), 2026-06-10: A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account,…
CVE-2025-66281 - CVSS 7.2 (high), 2026-06-10: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the…
CVE-2025-66279 - CVSS 8.6 (high), 2026-06-10: A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account,…
CVE-2025-66273 - CVSS 8.6 (high), 2026-06-10: A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account,…
CVE-2025-66280 - CVSS 7.2 (high), 2026-06-10: An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an…
CVE-2025-62850 - CVSS 7.2 (high), 2026-06-10: A NULL pointer dereference vulnerability has been reported to affect QTS, QVP, QuTS cloud and QuTS hero. If a remote attacker gains an administrator account,…
CVE-2025-66276 - CVSS 9.8 (critical), 2026-06-10: QuTS hero is not affected. We have already fixed the vulnerability in the following version: QTS 5.2.7.3256 build 20250913 and later
CVE-2025-59382 - CVSS 1.2 (low), 2026-06-10: QTS, QuTS hero, QuTScloud are not affected. We have already fixed the vulnerability in the following version:
CVE-2025-62858 - CVSS 6.5 (medium), 2026-06-09: A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they…
CVE-2026-41539 - CVSS 6.3 (medium), 2026-06-09: A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the…
CVE-2024-14026 - CVSS 7.8 (high), 2026-03-11: A command injection vulnerability has been reported to affect several QNAP operating system versions. If an attacker gains local network access who have also…
CVE-2025-66277 - CVSS 9.8 (critical), 2026-02-11: A link following vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to…
CVE-2025-66274 - CVSS 5.1 (medium), 2026-02-11: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-58466 - CVSS 4.9 (medium), 2026-02-11: A use of uninitialized variable vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-47205 - CVSS 5.1 (medium), 2026-02-11: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-9110 - CVSS 7.5 (high), 2026-01-02: An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect several QNAP operating system…
CVE-2025-62852 - CVSS 6.5 (medium), 2026-01-02: A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they…
CVE-2025-59381 - CVSS 6.9 (medium), 2026-01-02: A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they…
CVE-2025-48721 - CVSS 6.5 (medium), 2026-01-02: A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they…
CVE-2025-59380 - CVSS 4.9 (medium), 2026-01-02: A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they…
CVE-2025-57705 - CVSS 4.9 (medium), 2026-01-02: An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker…
CVE-2025-54166 - CVSS 4.9 (medium), 2026-01-02: An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account,…
CVE-2025-53593 - CVSS 6.5 (medium), 2026-01-02: A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they…
CVE-2025-54165 - CVSS 4.9 (medium), 2026-01-02: An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account,…
CVE-2025-54164 - CVSS 4.9 (medium), 2026-01-02: An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account,…
CVE-2025-53596 - CVSS 4.9 (medium), 2026-01-02: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-53589 - CVSS 4.9 (medium), 2026-01-02: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-53590 - CVSS 4.9 (medium), 2026-01-02: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-53414 - CVSS 4.9 (medium), 2026-01-02: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-53592 - CVSS 6.5 (medium), 2026-01-02: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they…
CVE-2025-53405 - CVSS 4.9 (medium), 2026-01-02: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-53591 - CVSS 6.5 (medium), 2026-01-02: A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an…
CVE-2025-52431 - CVSS 4.9 (medium), 2026-01-02: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-52872 - CVSS 8.1 (high), 2026-01-02: A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then…
CVE-2025-52430 - CVSS 4.9 (medium), 2026-01-02: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-52864 - CVSS 8.1 (high), 2026-01-02: A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then…
CVE-2025-52426 - CVSS 4.9 (medium), 2026-01-02: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-52863 - CVSS 8.1 (high), 2026-01-02: A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then…
CVE-2025-47208 - CVSS 6.5 (medium), 2026-01-02: An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker…
CVE-2025-44013 - CVSS 6.5 (medium), 2026-01-02: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they…
CVE-2025-62847 - CVSS 7.5 (high), 2025-12-16: An improper neutralization of argument delimiters in a command vulnerability has been reported to affect several QNAP operating system versions. The remote…
CVE-2025-59385 - CVSS 9.8 (critical), 2025-12-16: An authentication bypass by spoofing vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit…
CVE-2025-62849 - CVSS 9.8 (critical), 2025-12-16: An SQL injection vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to…
CVE-2025-62848 - CVSS 8.1 (high), 2025-12-16: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the…
CVE-2025-53406 - CVSS 6.5 (medium), 2025-10-03: A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an…
CVE-2025-52866 - CVSS 5.1 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-52862 - CVSS 5.1 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-53407 - CVSS 6.5 (medium), 2025-10-03: A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an…
CVE-2025-52855 - CVSS 5.1 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-52859 - CVSS 5.1 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-52854 - CVSS 5.1 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-52858 - CVSS 5.1 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-52857 - CVSS 5.1 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-52860 - CVSS 5.1 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-52433 - CVSS 5.1 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-52432 - CVSS 5.1 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-52853 - CVSS 5.1 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-48730 - CVSS 6.5 (medium), 2025-10-03: A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an…
CVE-2025-52428 - CVSS 5.1 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-48729 - CVSS 5.1 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-52427 - CVSS 5.1 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-52424 - CVSS 5.1 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-52429 - CVSS 6.5 (medium), 2025-10-03: A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an…
CVE-2025-48726 - CVSS 5.1 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-47214 - CVSS 5.1 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-48728 - CVSS 5.1 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-47213 - CVSS 5.1 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-48727 - CVSS 5.1 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2025-47212 - CVSS 7.2 (high), 2025-10-03: A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account,…
CVE-2025-47211 - CVSS 6.9 (medium), 2025-10-03: A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they…
CVE-2025-33032 - CVSS 5.1 (medium), 2025-08-29: A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they…
CVE-2025-30271 - CVSS 6.5 (medium), 2025-08-29: A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then…
CVE-2025-30274 - CVSS 6.5 (medium), 2025-08-29: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If can then exploit the vulnerability to launch a…
CVE-2025-30270 - CVSS 6.5 (medium), 2025-08-29: A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then…
CVE-2025-30273 - CVSS 8.1 (high), 2025-08-29: An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can…
CVE-2025-30272 - CVSS 6.5 (medium), 2025-08-29: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If can then exploit the vulnerability to launch a…
CVE-2025-30267 - CVSS 6.5 (medium), 2025-08-29: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they…
CVE-2025-30265 - CVSS 6.5 (medium), 2025-08-29: A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then…
CVE-2025-30264 - CVSS 8.8 (high), 2025-08-29: A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then…
CVE-2025-30268 - CVSS 6.5 (medium), 2025-08-29: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they…
CVE-2025-29882 - CVSS 6.5 (medium), 2025-08-29: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they…
CVE-2025-22481 - CVSS 8.8 (high), 2025-06-06: A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote…
CVE-2024-56805 - CVSS 5.4 (medium), 2025-06-06: A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote…
CVE-2024-53698 - CVSS 4.9 (medium), 2025-03-07: A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers…
CVE-2024-53697 - CVSS 7.2 (high), 2025-03-07: An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote…
CVE-2024-53696 - CVSS 5.1 (medium), 2025-03-07: A server-side request forgery (SSRF) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers who…
CVE-2024-53699 - CVSS 7.2 (high), 2025-03-07: An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote…
CVE-2024-53693 - CVSS 7.1 (high), 2025-03-07: An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If…
CVE-2024-53692 - CVSS 5.1 (medium), 2025-03-07: A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote…
CVE-2024-50405 - CVSS 5.5 (medium), 2025-03-07: An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If…
CVE-2024-38638 - CVSS 7.2 (high), 2025-03-07: An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote…
CVE-2024-13086 - CVSS 7.5 (high), 2025-03-07: An exposure of sensitive information vulnerability has been reported to affect product. If exploited, the vulnerability could allow remote attackers to…
CVE-2022-27600 - CVSS 7.5 (high), 2024-12-19: An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could…
CVE-2024-53691 - CVSS 8.8 (high), 2024-12-06: A link following vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote…
CVE-2024-48868 - CVSS 8.7 (high), 2024-12-06: An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If…
CVE-2024-50403 - CVSS 7.2 (high), 2024-12-06: A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability…