Qnap - vulnerabilities (CVEs)

648 CVEs in 164 products, 9 in the last 30 days, newest from 2026-10-15.

Products

Qts - 283 CVEs
Quts Hero - 234 CVEs
Qutscloud - 63 CVEs
Qsync Central - 62 CVEs
File Station - 57 CVEs
Photo Station - 25 CVEs
Video Station - 21 CVEs
Media Streaming Add-on - 13 CVEs
Music Station - 13 CVEs
Qumagie - 13 CVEs
Qurouter - 12 CVEs
Helpdesk - 11 CVEs
Qvr - 10 CVEs
Qulog Center - 8 CVEs
Nas Proxy Server - 7 CVEs
Q'center - 7 CVEs
Qcenter Virtual Appliance - 7 CVEs
Hybrid Backup Sync - 6 CVEs
License Center - 6 CVEs
Notes Station 3 - 6 CVEs
Qvr Pro - 6 CVEs
Surveillance Station - 6 CVEs
Multimedia Console - 5 CVEs
Qunetswitch - 5 CVEs
Qvr Elite - 5 CVEs
Qvr Guard - 5 CVEs
Qes - 4 CVEs
Qnap Media Streaming Add-on - 4 CVEs
Qnap Qts - 4 CVEs
Download Station - 3 CVEs
Qcalagent - 3 CVEs
Qufirewall - 3 CVEs
Qvp-21a Firmware - 3 CVEs
Qvp-41a Firmware - 3 CVEs
Qvp-41b Firmware - 3 CVEs
Qvp-63a Firmware - 3 CVEs
Qvp-63b Firmware - 3 CVEs
Qvp-85a Firmware - 3 CVEs
Qvp-85b Firmware - 3 CVEs
Qvpn - 3 CVEs
Signage Station - 3 CVEs
Viostor Network Video Recorder - 3 CVEs
Hyper Data Protector - 2 CVEs
Iartist Lite - 2 CVEs
Kazoo Server - 2 CVEs
Malware Remover - 2 CVEs
Myqnapcloud - 2 CVEs
Myqnapcloud Link - 2 CVEs
Nas - 2 CVEs
Netbak Replicator - 2 CVEs
Q'center Virtual Appliance - 2 CVEs
Qmailagent - 2 CVEs
Qss - 2 CVEs
Qts Login Function - 2 CVEs
Qts Password Function - 2 CVEs
Qusbcam2 - 2 CVEs
Surveillance Station Pro - 2 CVEs
Ts-239 Pro Turbo Nas - 2 CVEs
Ts-639 Pro Turbo Nas - 2 CVEs
Ai Core - 1 CVEs
App Center In Qts - 1 CVEs
Authenticator - 1 CVEs
Container Station - 1 CVEs
Ej1600 Firmware - 1 CVEs
Hbs 3 - 1 CVEs
Helpdesk In Qts - 1 CVEs
Hybriddesk Station - 1 CVEs
Image2pdf - 1 CVEs
Ldap Server In Qts - 1 CVEs
Notification Center - 1 CVEs
Nvr Storage Expansion Firmware - 1 CVEs
Photo Station Firmware - 1 CVEs
Qfile - 1 CVEs
Qfiling - 1 CVEs
Qfinder Pro - 1 CVEs
Qnap Helpdesk App - 1 CVEs
Qsw-m2116p-2t2s Firmware - 1 CVEs
Qsync - 1 CVEs
Qsync For Windows Exe - 1 CVEs
Qts External Device Function - 1 CVEs
Qts Ftp Service - 1 CVEs
Qts Helpdesk - 1 CVEs
Qts Media Libary Product - 1 CVEs
Qts Notification Function - 1 CVEs
Quftp - 1 CVEs
Qvr Firmware - 1 CVEs
Qvr Pro Client - 1 CVEs
Qvr Smart Client - 1 CVEs
Ragic Cloud Db - 1 CVEs
Roon Server - 1 CVEs
Sinage Station - 1 CVEs
Smb Service - 1 CVEs
Ss-839 - 1 CVEs
Ss-839 Firmware - 1 CVEs
Tl-d1600s Firmware - 1 CVEs
Tl-d400s Firmware - 1 CVEs
Tl-d800c Firmware - 1 CVEs
Tl-d800s Firmware - 1 CVEs
Tl-r1200c-rp Firmware - 1 CVEs
Tl-r1200s-rp Firmware - 1 CVEs
Tl-r1220sep-rp Firmware - 1 CVEs
Tl-r1620sdc Firmware - 1 CVEs
Tl-r1620sep-rp Firmware - 1 CVEs
Tl-r400s Firmware - 1 CVEs
Tr-002 Firmware - 1 CVEs
Tr-004 Firmware - 1 CVEs
Tr-004u Firmware - 1 CVEs
Ts-212p Firmware - 1 CVEs
Ts-239 Pro Firmware - 1 CVEs
Ts-459u - 1 CVEs
Ts-459u Firmware - 1 CVEs
Ts-469u - 1 CVEs
Ts-469u Firmware - 1 CVEs
Ts-639 Pro Firmware - 1 CVEs
Ts-ec1679u-rp - 1 CVEs
Ts-ec1679u-rp Firmware - 1 CVEs
Viocard-100 Firmware - 1 CVEs
Viocard-300 Firmware - 1 CVEs
Viocard-30 Firmware - 1 CVEs
Viocard 300 Firmware - 1 CVEs
Viogate-340 Firmware - 1 CVEs
Viogate-340a Firmware - 1 CVEs
Ej1600 - 0 CVEs
Nvr Storage Expansion - 0 CVEs
Qgd-1600p - 0 CVEs
Qgd-1602p - 0 CVEs
Qgd-3014pt - 0 CVEs
Qsw-m2108-2c - 0 CVEs
Qsw-m2108-2c Firmware - 0 CVEs
Qsw-m2108-2s - 0 CVEs
Qsw-m2108-2s Firmware - 0 CVEs
Qsw-m2108r-2c - 0 CVEs
Qsw-m2108r-2c Firmware - 0 CVEs
Qsw-m2116p-2t2s - 0 CVEs
Qsw-m408 - 0 CVEs
Qvp-21a - 0 CVEs
Qvp-41a - 0 CVEs
Qvp-41b - 0 CVEs
Qvp-63a - 0 CVEs
Qvp-63b - 0 CVEs
Qvp-85a - 0 CVEs
Qvp-85b - 0 CVEs
Tl-d1600s - 0 CVEs
Tl-d400s - 0 CVEs
Tl-d800c - 0 CVEs
Tl-d800s - 0 CVEs
Tl-r1200c-rp - 0 CVEs
Tl-r1200s-rp - 0 CVEs
Tl-r1220sep-rp - 0 CVEs
Tl-r1620sdc - 0 CVEs
Tl-r1620sep-rp - 0 CVEs
Tl-r400s - 0 CVEs
Tr-002 - 0 CVEs
Tr-004 - 0 CVEs
Tr-004u - 0 CVEs
Ts-212p - 0 CVEs
Ts-239 Pro - 0 CVEs
Ts-639 Pro - 0 CVEs
Viocard-100 - 0 CVEs
Viocard-30 - 0 CVEs
Viocard-300 - 0 CVEs
Viocard 300 - 0 CVEs
Viogate-340 - 0 CVEs
Viogate-340a - 0 CVEs

Newest CVEs of Qnap

CVE-2026-44084 - CVSS 8.7 (high), 2026-10-15: An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow…
CVE-2026-34015 - CVSS 8.7 (high), 2026-10-15: A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability…
CVE-2026-26245 - CVSS 8.8 (high), 2026-10-15: A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to…
CVE-2026-26244 - CVSS 8.8 (high), 2026-10-15: A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to…
CVE-2026-24723 - CVSS 6.5 (medium), 2026-10-15: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the…
CVE-2026-24722 - CVSS 6.5 (medium), 2026-10-15: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the…
CVE-2026-24721 - CVSS 6.5 (medium), 2026-10-15: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the…
CVE-2025-66275 - CVSS 7.7 (high), 2026-10-15: A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability…
CVE-2025-66272 - CVSS 7.7 (high), 2026-10-15: A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability…
CVE-2026-26241 - CVSS 9.1 (critical), 2026-06-10: A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash…
CVE-2026-26240 - CVSS 9.1 (critical), 2026-06-10: A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash…
CVE-2026-26239 - CVSS 8.1 (high), 2026-06-10: A buffer overflow vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability…
CVE-2026-26237 - CVSS 7.5 (high), 2026-06-10: A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data…
CVE-2026-24719 - CVSS 7.2 (high), 2026-06-10: A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account,…
CVE-2026-24720 - CVSS 6.5 (medium), 2026-06-10: An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account,…
CVE-2026-24724 - CVSS 8.1 (high), 2026-06-10: An incorrect authorization vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the…
CVE-2026-24717 - CVSS 6.5 (medium), 2026-06-10: A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they…
CVE-2026-22899 - CVSS 6.5 (medium), 2026-06-10: A NULL pointer dereference vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the…
CVE-2026-24716 - CVSS 7.2 (high), 2026-06-10: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
CVE-2026-22893 - CVSS 8.6 (high), 2026-06-10: A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account,…
CVE-2025-66281 - CVSS 7.2 (high), 2026-06-10: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the…
CVE-2025-66279 - CVSS 8.6 (high), 2026-06-10: A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account,…
CVE-2025-66273 - CVSS 8.6 (high), 2026-06-10: A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account,…
CVE-2025-66280 - CVSS 7.2 (high), 2026-06-10: An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an…
CVE-2025-62851 - CVSS 4.6 (medium), 2026-06-10: A path traversal vulnerability has been reported to affect License Center. If a local attacker gains an administrator account, they can then exploit the…
CVE-2025-62850 - CVSS 7.2 (high), 2026-06-10: A NULL pointer dereference vulnerability has been reported to affect QTS, QVP, QuTS cloud and QuTS hero. If a remote attacker gains an administrator account,…
CVE-2025-58468 - CVSS 8.8 (high), 2026-06-10: A cross-site request forgery (CSRF) vulnerability has been reported to affect Notification Center. The remote attackers can then exploit the vulnerability to…
CVE-2025-66276 - CVSS 9.8 (critical), 2026-06-10: QuTS hero is not affected. We have already fixed the vulnerability in the following version: QTS 5.2.7.3256 build 20250913 and later
CVE-2026-44083 - CVSS 9.8 (critical), 2026-06-09: An authorization bypass through user-controlled key vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability…
CVE-2025-62858 - CVSS 6.5 (medium), 2026-06-09: A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they…