Login Request a demo
QT
Product
QTS
by QNAP · last CVE Jun 10, 2026
On CISA KEVExploited in the wildRansomware-linked
283
CVEs
7
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities283In the news3Timeline
Severity mix
Critical 43High 115Medium 120Low 3
Severity
All severities283Critical43High115Medium120Low3
Exploitation
On CISA KEV7Exploited in the wild7
Watch

Add QTS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-30264
8.8
2%
Aug 29
A command injection vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +7 more
CVE-2025-22481
8.8
1%
Jun 6
A command injection vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +5 more
CVE-2024-53691
8.8
24%
Dec 6
A link following vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +10 more
CVE-2024-50397
8.8
1%
Nov 22
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +1 more
CVE-2024-50396
8.8
1%
Nov 22
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +1 more
CVE-2024-32763
8.8
1%
Sep 6
QTS, QuTS hero
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +7 more
CVE-2023-34974
8.8
1%
Sep 6
QTS, QuTS hero, QuTScloud, QVR, QES
Affected: 4.5.4.1715; 4.5.4.1723; 4.5.4.1741; 4.5.4.1787; 4.5.4.1800; 4.5.4.1892; +7 more
CVE-2024-21898
8.8
1%
Sep 6
QTS, QuTS hero
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +5 more
CVE-2023-51367
8.8
0%
Sep 6
QTS, QuTS hero
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +5 more
CVE-2024-27130
8.8
38%
May 21
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +6 more
CVE-2024-27129
8.8
1%
May 21
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +6 more
CVE-2024-27128
8.8
1%
May 21
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +6 more
CVE-2024-27127
8.8
1%
May 21
A double free vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +6 more
CVE-2023-50364
8.8
1%
Apr 26
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +5 more
CVE-2023-50362
8.8
1%
Apr 26
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +5 more
CVE-2023-50361
8.8
1%
Apr 26
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +5 more
CVE-2023-47568
8.8
1%
Feb 2
A SQL injection vulnerability has been reported to affect several QNAP operating system versions
Affected: 4.5.4.1715; 4.5.4.1723; 4.5.4.1741; 4.5.4.1787; 4.5.4.1800; 4.5.4.1892; +16 more
CVE-2023-39297
8.8
1%
Feb 2
An OS command injection vulnerability has been reported to affect several QNAP operating system versions
Affected: 4.5.4.1715; 4.5.4.1723; 4.5.4.1741; 4.5.4.1787; 4.5.4.1800; 4.5.4.1892; +15 more
CVE-2023-23362
8.8
2%
Sep 22
An OS command injection vulnerability has been reported to affect QNAP operating systems
Affected: 4.5.4 before 4.5.4.2374; 5.0.1 before 5.0.1.2376
CVE-2023-34971
8.8
0%
Aug 24
An inadequate encryption strength vulnerability has been reported to affect QNAP operating systems
Affected: 4.5.4 before 4.5.4.2467; 5.0.1 before 5.0.1.2425; 5.1.0 before 5.1.0.2444
CVE-2021-44051
8.8
2%
May 5
A command injection vulnerability has been reported to affect QNAP NAS running QuTScloud, QuTS hero and QTS
Affected: 5.0.0.1716 before 5.0.0.1986
CVE-2021-28816
8.8
1%
Sep 10
A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero
Affected: before 4.3.3.1693; 4.3.4 before 4.3.6.1750; 4.4.0 before 4.5.4.1715; 5.0.0 before 5.0.0.1716
CVE-2020-25847
8.8
3%
Dec 29
This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application
Affected: before 4.5.1.1495
CVE-2023-34980
8.4
1%
Mar 8
An OS command injection vulnerability has been reported to affect several QNAP operating system versions
Affected: 4.5.1 before 4.5.4.2627; 4.5.4.2627
CVE-2023-47218
8.3
90%
Feb 13
An OS command injection vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.1.0 before 5.1.5.2645; 5.1.5.2645
CVE-2024-21905
8.2
0%
Apr 26
An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.0.0 before 5.1.3.2578; 5.1.3.2578
CVE-2025-48725
8.1
0%
Feb 11
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +13 more
CVE-2025-52872
8.1
0%
Jan 2
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +10 more
CVE-2025-52864
8.1
0%
Jan 2
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +10 more
CVE-2025-52863
8.1
0%
Jan 2
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +10 more
CVE-2025-30273
8.1
0%
Aug 29
An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +7 more
CVE-2024-21902
8.1
0%
May 21
An incorrect permission assignment for critical resource vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +6 more
CVE-2023-50363
8.1
0%
Apr 26
An incorrect authorization vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +5 more
CVE-2021-44052
8.1
2%
May 5
An improper link resolution before file access ('Link Following') vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, and QTS
Affected: 5.0.0.1716 before 5.0.0.1986
CVE-2024-14026
7.8
1%
Mar 11
QTS, QuTS hero
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +17 more
CVE-2024-38641
7.8
1%
Sep 6
QTS, QuTS hero
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +7 more
CVE-2023-39298
7.8
0%
Sep 6
QTS, QuTS hero
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +10 more
CVE-2018-0721
7.7
2%
Nov 27
Buffer Overflow vulnerability in NAS devices
Affected: 4.2.6; 4.3.3; 4.3.4
CVE-2025-9110
7.5
0%
Jan 2
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +12 more
CVE-2025-62847
7.5
1%
Dec 16
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +11 more
CVE-2025-62848
7.5
1%
Dec 16
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +11 more
CVE-2024-13086
7.5
0%
Mar 7
An exposure of sensitive information vulnerability has been reported to affect product
Affected: 5.0.0 before 5.2.0.2851
CVE-2022-27600
7.5
1%
Dec 19
QTS, QuTS hero, QuTScloud
Affected: 4.5.1 before 4.5.4.2280; 5.0.0 before 5.0.1.2277; 4.5.4.2280; 5.0.1.2277
CVE-2024-48868
7.5
0%
Dec 6
An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +16 more
CVE-2024-48867
7.5
0%
Dec 6
An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +16 more
CVE-2024-48865
7.5
0%
Dec 6
An improper certificate validation vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +16 more
CVE-2024-27124
7.5
1%
Apr 26
An OS command injection vulnerability has been reported to affect several QNAP operating system versions
Affected: 4.5.1 before 4.5.4.2627; 5.0.0 before 5.1.3.2578; 4.5.4.2627; 5.1.3.2578
CVE-2023-51365
7.5
35%
Apr 26
A path traversal vulnerability has been reported to affect several QNAP operating system versions
Affected: 4.5.1 before 4.5.4.2627; 5.1.0 before 5.1.4.2596; 4.5.4.2627; 5.1.4.2596
CVE-2023-51364
7.5
40%
Apr 26
A path traversal vulnerability has been reported to affect several QNAP operating system versions
Affected: 4.5.1 before 4.5.4.2627; 5.1.0 before 5.1.4.2596; 4.5.4.2627; 5.1.4.2596
CVE-2023-39296
7.5
2%
Jan 5
A prototype pollution vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +1 more
Page 1 of 3 · 115 total
123