QT
Product
QTS
by QNAP · last CVE Jun 10, 2026
On CISA KEVExploited in the wildRansomware-linked
283
CVEs
7
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 43High 115Medium 120Low 3
Watch

Add QTS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-2509
In wildKEV
9.8
34%
Apr 17
Command Injection Vulnerability in QTS and QuTS hero
Affected: before 4.2.6; 4.3.5 before 4.3.6; 4.4.0 before 4.5.1; 4.2.6; 4.2.6; 4.2.6; +34 more
CVE-2018-19949
RansomwareIn wildKEV
9.8
30%
Oct 28
QNAP NAS File Station Command Injection Vulnerability
Affected: before 4.2.6; 4.3.1.0013 before 4.3.3.1161; 4.3.4 before 4.3.4.1190; 4.3.6 before 4.3.6.1218; 4.4.0 before 4.4.1.1201; 4.4.2 before 4.4.2.1231; +6 more
CVE-2019-7193
RansomwareIn wildKEV
9.8
14%
Dec 5
QNAP QTS Improper Input Validation Vulnerability
Affected: 4.3.6.0895; 4.3.6.0907; 4.3.6.0923; 4.3.6.0944; 4.3.6.0959; 4.3.6.0979; +10 more
CVE-2014-7169
In wildKEV
9.8
100%
Sep 25
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
Affected: before 4.1.1; 4.1.1; 4.1.1
CVE-2014-6271
In wildKEV
9.8
100%
Sep 24
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
Affected: before 4.1.1; 4.1.1; 4.1.1
CVE-2018-19953
RansomwareIn wildKEV
6.1
31%
Oct 28
QNAP NAS File Station Cross-Site Scripting Vulnerability
Affected: before 4.2.6; 4.3.1.0013 before 4.3.3.1161; 4.3.4 before 4.3.4.1190; 4.3.6 before 4.3.6.1218; 4.4.0 before 4.4.1.1201; 4.4.2 before 4.4.2.1231; +6 more
CVE-2018-19943
RansomwareIn wildKEV
5.4
23%
Oct 28
QNAP NAS File Station Cross-Site Scripting Vulnerability
Affected: before 4.2.6; 4.3.1.0013 before 4.3.3.1252; 4.3.4 before 4.3.4.1282; 4.3.6 before 4.3.6.1263; 4.4.0 before 4.4.1.1261; 4.4.2 before 4.4.2.1270; +10 more
Showing 7