QNAP QTS vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
200 matching records
- Critical9.3A path traversal vulnerability has been reported to affect Qsirch.Check if you run itEPSS 0.43%Oct 15, 2026
- Medium6.3A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service.Check if you run itEPSS 0.28%Oct 15, 2026
- Critical9.3An OS command injection vulnerability has been reported to affect HybridDesk Station.Check if you run itEPSS 1.07%Oct 15, 2026
- High8.9A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station.Check if you run itEPSS 0.24%Oct 15, 2026
- Medium4.8A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3.Check if you run itEPSS 0.29%Oct 15, 2026
- High8.4An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3.Check if you run itEPSS 0.11%Oct 15, 2026
- High8.5An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3.Check if you run itEPSS 0.10%Oct 15, 2026
- Medium6.9An OS command injection vulnerability has been reported to affect Notes Station 3.Check if you run itEPSS 1.45%Oct 15, 2026
- High8.7An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station.Check if you run itEPSS 0.36%Oct 15, 2026
- Critical9.4An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie.Check if you run itEPSS 0.38%Oct 15, 2026
- High8.7An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station.Check if you run itEPSS 0.31%Oct 15, 2026
- High8.6A relative path traversal vulnerability has been reported to affect QuMagie.Check if you run itEPSS 0.42%Oct 15, 2026
- Medium5.3An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central.Check if you run itEPSS 0.38%Oct 15, 2026
- Medium5.3A server-side request forgery (SSRF) vulnerability has been reported to affect Download Station.Check if you run itEPSS 0.26%Oct 15, 2026
- High8.7A path traversal vulnerability has been reported to affect Video Station.Check if you run itEPSS 0.38%Oct 15, 2026
- High8.4An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station.Check if you run itEPSS 0.10%Oct 15, 2026
- Critical9.3A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE.Check if you run itEPSS 0.40%Oct 15, 2026
- High7.1A SQL injection vulnerability has been reported to affect Video Station.Check if you run itEPSS 0.38%Oct 15, 2026
- High7.1A SQL injection vulnerability has been reported to affect Video Station.Check if you run itEPSS 0.38%Oct 15, 2026
- High7.2A path traversal vulnerability has been reported to affect Qsync Central.Check if you run itEPSS 0.42%Oct 15, 2026
- High8.7A path traversal vulnerability has been reported to affect QcalAgent.Check if you run itEPSS 0.36%Oct 15, 2026
- High8.7A relative path traversal vulnerability has been reported to affect Download Station.Check if you run itEPSS 0.36%Oct 15, 2026
- Medium5.3A NULL pointer dereference vulnerability has been reported to affect File Station 5.Check if you run itEPSS 0.28%Oct 15, 2026
- Medium5.3A NULL pointer dereference vulnerability has been reported to affect File Station 5.Check if you run itEPSS 0.28%Oct 15, 2026
- Medium5.3A NULL pointer dereference vulnerability has been reported to affect File Station 5.Check if you run itEPSS 0.28%Oct 15, 2026