QT
Product
QTS
On CISA KEVExploited in the wildRansomware-linked
283
CVEs
7
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 43High 115Medium 120Low 3
Watch
Add QTS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-32974 | 7.5 | Oct 13 | A path traversal vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0 before 5.1.0.2444 |
| CVE-2021-28798 | 7.5 | May 21 | A relative path traversal vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero Affected: 4.3.2.0144 before 4.3.3.1624; 4.3.4.0000 before 4.3.6.1663; 4.4.0000 before 4.5.2.1630 |
| CVE-2018-19944 | 7.5 | Dec 31 | A cleartext transmission of sensitive information vulnerability has been reported to affect certain QTS devices Affected: before 4.4.3.1354 |
| CVE-2018-19941 | 7.5 | Dec 31 | A vulnerability has been reported to affect QNAP NAS Affected: before 4.5.1.1456 |
| CVE-2018-14748 | 7.5 | Nov 28 | Improper Authorization vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could allow… Affected: 4.2.6; 4.3.3; 4.3.4; 4.3.5 |
| CVE-2018-14747 | 7.5 | Nov 28 | NULL Pointer Dereference vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could allow… Affected: 4.2.6; 4.3.3; 4.3.4; 4.3.5 |
| CVE-2017-7629 | 7.5 | Jun 15 | QNAP QTS before 4.2.6 build 20170517 has a flaw in the change password function Affected: through 4.2.6 |
| CVE-2017-5227 | 7.5 | Mar 23 | QNAP QTS before 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within the… Affected: through 4.2.4 |
| CVE-2026-24719 | 7.2 | Jun 10 | QTS, QuTS hero Affected: 5.2.0.2737 before 5.2.9.3492 |
| CVE-2026-24716 | 7.2 | Jun 10 | QTS, QuTS hero Affected: 5.2.0.2737 before 5.2.9.3492 |
| CVE-2026-22893 | 7.2 | Jun 10 | QTS, QuTS hero Affected: 5.2.0.2737 before 5.2.9.3410 |
| CVE-2025-66281 | 7.2 | Jun 10 | QTS, QuTS hero Affected: 5.2.0.2737 before 5.2.9.3410 |
| CVE-2025-66280 | 7.2 | Jun 10 | QTS, QuTS hero Affected: 5.2.0.2737 before 5.2.9.3410 |
| CVE-2025-66279 | 7.2 | Jun 10 | QTS, QuTS hero Affected: 5.2.0.2737 before 5.2.9.3410 |
| CVE-2025-66273 | 7.2 | Jun 10 | QTS, QuTS hero Affected: 5.2.0.2737 before 5.2.9.3410 |
| CVE-2025-47212 | 7.2 | Oct 3 | A command injection vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +8 more |
| CVE-2024-53699 | 7.2 | Mar 7 | An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +3 more |
| CVE-2024-53697 | 7.2 | Mar 7 | An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +3 more |
| CVE-2024-38638 | 7.2 | Mar 7 | An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +8 more |
| CVE-2024-50403 | 7.2 | Dec 6 | A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +16 more |
| CVE-2024-50402 | 7.2 | Dec 6 | A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +16 more |
| CVE-2024-50401 | 7.2 | Nov 22 | A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +1 more |
| CVE-2024-50400 | 7.2 | Nov 22 | A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +1 more |
| CVE-2024-50399 | 7.2 | Nov 22 | A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +1 more |
| CVE-2024-50398 | 7.2 | Nov 22 | A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +1 more |
| CVE-2024-37044 | 7.2 | Nov 22 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +1 more |
| CVE-2024-37041 | 7.2 | Nov 22 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +1 more |
| CVE-2023-34979 | 7.2 | Sep 6 | QTS, QuTS hero Affected: 4.5.4.1715; 4.5.4.1723; 4.5.4.1741; 4.5.4.1787; 4.5.4.1800; 4.5.4.1892; +7 more |
| CVE-2023-39300 | 7.2 | Sep 6 | An OS command injection vulnerability has been reported to affect legacy QTS Affected: 4.3.6.0895; 4.3.6.0907; 4.3.6.0923; 4.3.6.0944; 4.3.6.0959; 4.3.6.0979; +34 more |
| CVE-2023-47567 | 7.2 | Feb 2 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions Affected: 4.5.4.1715; 4.5.4.1723; 4.5.4.1741; 4.5.4.1787; 4.5.4.1800; 4.5.4.1892; +16 more |
| CVE-2023-47566 | 7.2 | Feb 2 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +4 more |
| CVE-2023-45037 | 7.2 | Feb 2 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +2 more |
| CVE-2023-45036 | 7.2 | Feb 2 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +2 more |
| CVE-2023-45035 | 7.2 | Feb 2 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +3 more |
| CVE-2023-41292 | 7.2 | Feb 2 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +3 more |
| CVE-2023-41283 | 7.2 | Feb 2 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +3 more |
| CVE-2023-41282 | 7.2 | Feb 2 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +4 more |
| CVE-2023-41281 | 7.2 | Feb 2 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +3 more |
| CVE-2023-41280 | 7.2 | Feb 2 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +1 more |
| CVE-2023-41279 | 7.2 | Feb 2 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +1 more |
| CVE-2023-41278 | 7.2 | Feb 2 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +1 more |
| CVE-2023-41277 | 7.2 | Feb 2 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +1 more |
| CVE-2023-41276 | 7.2 | Feb 2 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +1 more |
| CVE-2023-41275 | 7.2 | Feb 2 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +1 more |
| CVE-2023-41273 | 7.2 | Feb 2 | A heap-based buffer overflow vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +1 more |
| CVE-2023-39302 | 7.2 | Feb 2 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +2 more |
| CVE-2023-45044 | 7.2 | Jan 5 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +2 more |
| CVE-2023-45043 | 7.2 | Jan 5 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +2 more |
| CVE-2023-45042 | 7.2 | Jan 5 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +2 more |
| CVE-2023-45041 | 7.2 | Jan 5 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +2 more |