QTS vulnerabilities | LiveThreat CVE Feed

Product

QTS

by QNAP · last CVE Jun 10, 2026

On CISA KEVExploited in the wildRansomware-linked

283

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities283 In the news3 Timeline

Severity mix

Critical 43High 115Medium 120Low 3

Severity

All severities283 Critical43 High115 Medium120 Low3

Exploitation

On CISA KEV7 Exploited in the wild7

Watch

Add QTS to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-53696	4.9	0%	Mar 7	A server-side request forgery (SSRF) vulnerability has been reported to affect QuLog Center Affected: 4.5.1 before 4.5.4.2957
CVE-2024-37048	4.9	1%	Nov 22	A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +1 more
CVE-2024-37046	4.9	1%	Nov 22	A path traversal vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +1 more
CVE-2024-37045	4.9	1%	Nov 22	A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +1 more
CVE-2024-37043	4.9	1%	Nov 22	A path traversal vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +1 more
CVE-2024-37042	4.9	1%	Nov 22	A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +1 more
CVE-2023-45028	4.9	0%	Feb 2	An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +4 more
CVE-2023-45027	4.9	0%	Feb 2	A path traversal vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +4 more
CVE-2023-45026	4.9	0%	Feb 2	A path traversal vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +4 more
CVE-2023-41274	4.9	0%	Feb 2	A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +1 more
CVE-2023-32970	4.9	1%	Oct 13	A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions Affected: 4.5.1 before 4.5.4.2467; 5.0.0.1716 before 5.0.1.2425; 5.1.0 before 5.1.0.2444
CVE-2023-50366	4.8	0%	Sep 6	QTS, QuTS hero Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +5 more
CVE-2023-32969	4.8	0%	Mar 8	A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch Affected: 5.1.0 before 5.1.4.2596; 5.1.4.2596
CVE-2019-7197	4.8	1%	Dec 4	A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS Affected: 4.2.6; 4.3.3; 4.3.4; 4.3.6; 4.4.1
CVE-2024-53692	4.7	1%	Mar 7	A command injection vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +3 more
CVE-2024-21906	4.7	1%	Sep 6	QTS, QuTS hero Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +7 more
CVE-2024-21903	4.7	1%	Sep 6	QTS, QuTS hero Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +5 more
CVE-2024-21901	4.7	19%	Mar 8	A SQL injection vulnerability has been reported to affect myQNAPcloud Affected: before 4.5.4.2627; 4.5.4.2627
CVE-2023-39301	4.3	0%	Nov 3	A server-side request forgery (SSRF) vulnerability has been reported to affect several QNAP operating system versions Affected: before 5.1.1.2491; before 5.0.1.2514
CVE-2024-32765	4.2	0%	Aug 12	A vulnerability has been reported to affect Network & Virtual Switch Affected: 5.1.0 before 5.1.8.2823