QNAP Systems vulnerabilities
595 CVEs and advisories name QNAP Systems as an affected vendor, 8 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-68404vcs_pentest Race Condition Authentication Bypass Vulnerability in QuRouter management interface
- CVE-2025-68403Inadequate Steps to Confirm Vulnerability in QuRouter
- CVE-2025-66275Remote code execution via command injection
- CVE-2025-66272Arbitrary file deletion and remote code execution
- CVE-2025-29897Stack-based Buffer Overflow in qsyncsrv.cgi
- CVE-2025-29896NULL Pointer Dereference in qsyncsrv.cgi
- CVE-2025-29895NULL Pointer Dereference in qsyncsrv.cgi
- CVE-2024-38639QTS
- CVE-2024-27123QcalAgent
- CVE-2026-26240File Station 5
- CVE-2026-26241File Station 5
- CVE-2026-24724File Station 5
- CVE-2026-26239File Station 5
- CVE-2026-26237QuMagie
- CVE-2026-24719QTS, QuTS hero
- CVE-2026-24717QTS, QuTS hero
- CVE-2026-24716QTS, QuTS hero
- CVE-2026-24720File Station 5
- CVE-2026-22899File Station 5
- CVE-2026-22893QTS, QuTS hero
- CVE-2025-66281QTS, QuTS hero
- CVE-2025-66280QTS, QuTS hero
- CVE-2025-66279QTS, QuTS hero
- CVE-2025-66273QTS, QuTS hero
- CVE-2025-62851License Center
- CVE-2025-62850NULL Pointer Dereference in networkRequest.cgi
- CVE-2025-58468Notification Center
- CVE-2025-59382QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)
- CVE-2025-66276QTS
- CVE-2026-44083QuMagie