Browse CVEs

HIGH 7.2 CVE-2025-62850 A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administra… Quts Hero Mitigation only Fix from $1,9502026-06-10 MEDIUM 6.5 CVE-2025-62858 A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accou… Qts Mitigation only Fix from $1,6002026-06-09 MEDIUM 6.1 CVE-2026-41539 A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit … Qts Mitigation only Fix from $1,6002026-06-09 MEDIUM 6.7 CVE-2025-62846 An SQL injection vulnerability has been reported to affect QHora. If a local attacker gains an administrator account, they can then exploit the vulne… Qurouter Mitigation only Fix from $1,6002026-03-20 MEDIUM 6.8 CVE-2025-62843 An improper restriction of communication channel to intended endpoints vulnerability has been reported to affect QHora. If an attacker gains physical… Qurouter Mitigation only Fix from $1,6002026-03-20 MEDIUM 6.7 CVE-2025-62845 An improper neutralization of escape, meta, or control sequences vulnerability has been reported to affect QHora. If a local attacker gains an admini… Qurouter Mitigation only Fix from $1,6002026-03-20 MEDIUM 5.5 CVE-2025-62844 A weak authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulnerabi… Qurouter Mitigation only Fix from $1,6002026-03-20 HIGH 7.8 CVE-2024-14026 A command injection vulnerability has been reported to affect several QNAP operating system versions. If an attacker gains local network access who h… Qts Mitigation only Fix from $1,9502026-03-11 CRITICAL 9.8 CVE-2025-66277 A link following vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerab… Qts Mitigation only Fix from $2,3002026-02-11 HIGH 8.1 CVE-2025-48725 A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they c… Qts Mitigation only Fix from $1,9502026-02-11 HIGH 7.5 CVE-2025-9110 An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect several QNAP operating system… Qts Mitigation only Fix from $1,9502026-01-02 HIGH 7.5 CVE-2025-59384 A path traversal vulnerability has been reported to affect Qfiling. The remote attackers can then exploit the vulnerability to read the contents of u… Qfiling Mitigation only Fix from $1,9502026-01-02 MEDIUM 6.5 CVE-2025-62852 A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accou… Qts Mitigation only Fix from $1,6002026-01-02 MEDIUM 6.5 CVE-2025-48721 A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accou… Qts Mitigation only Fix from $1,6002026-01-02 MEDIUM 6.5 CVE-2025-53593 A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accou… Quts Hero Mitigation only Fix from $1,6002026-01-02 MEDIUM 6.5 CVE-2025-53591 A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker g… Quts Hero Mitigation only Fix from $1,6002026-01-02 MEDIUM 6.5 CVE-2025-53592 A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user accoun… Quts Hero Mitigation only Fix from $1,6002026-01-02 HIGH 8.1 CVE-2025-52863 A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they c… Quts Hero Mitigation only Fix from $1,9502026-01-02 HIGH 8.1 CVE-2025-52864 A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they c… Quts Hero Mitigation only Fix from $1,9502026-01-02 HIGH 8.1 CVE-2025-52872 A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they c… Quts Hero Mitigation only Fix from $1,9502026-01-02 MEDIUM 6.5 CVE-2025-47208 An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions. If a remote… Quts Hero Mitigation only Fix from $1,6002026-01-02 MEDIUM 6.5 CVE-2025-44013 A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user accoun… Quts Hero Mitigation only Fix from $1,6002026-01-02 CRITICAL 9.8 CVE-2025-59385 An authentication bypass by spoofing vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then … Qts Mitigation only Fix from $2,3002025-12-16 CRITICAL 9.8 CVE-2025-62849 An SQL injection vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerab… Qts Mitigation only Fix from $2,3002025-12-16 HIGH 7.5 CVE-2025-62847 An improper neutralization of argument delimiters in a command vulnerability has been reported to affect several QNAP operating system versions. The … Qts Mitigation only Fix from $1,9502025-12-16 HIGH 7.5 CVE-2025-62848 A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit th… Qts Mitigation only Fix from $1,9502025-12-16 CRITICAL 9.8 CVE-2017-20210 Photo Station 5.4.1 & 5.2.7 include the security fix for the vulnerability related to the XMR mining programs identified by internal research. Photo Station Mitigation only Fix from $2,3002025-11-11 MEDIUM 6.5 CVE-2025-53406 A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker g… Qts Mitigation only Fix from $1,6002025-10-03 MEDIUM 6.5 CVE-2025-53407 A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker g… Qts Mitigation only Fix from $1,6002025-10-03 MEDIUM 6.5 CVE-2025-48730 A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker g… Qts Mitigation only Fix from $1,6002025-10-03