Login Request a demo
QT
Product
QTS
by QNAP · last CVE Jun 10, 2026
On CISA KEVExploited in the wildRansomware-linked
283
CVEs
7
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities283In the news3Timeline
Severity mix
Critical 43High 115Medium 120Low 3
Severity
All severities283Critical43High115Medium120Low3
Exploitation
On CISA KEV7Exploited in the wild7
Watch

Add QTS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-23367
7.2
1%
Nov 10
An OS command injection vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.0.0.1716; 5.0.0.1785; 5.0.0.1808; 5.0.0.1828; 5.0.0.1837; 5.0.0.1850; +14 more
CVE-2023-32973
7.2
1%
Oct 13
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
Affected: 4.5.1 before 4.5.4.2467; 5.0.0.1716 before 5.0.1.2425; 5.1.0 before 5.1.0.2444
CVE-2023-32972
7.2
1%
Oct 6
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
Affected: 4.5.0 before 4.5.4.2467; 5.0.0 before 5.0.1.2425; 5.1.0 before 5.1.0.2444
CVE-2023-32971
7.2
1%
Oct 6
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
Affected: 4.5.0 before 4.5.4.2467; 5.0.0 before 5.0.1.2425; 5.1.0 before 5.1.0.2444
CVE-2023-23355
7.2
1%
Mar 29
An OS command injection vulnerability has been reported to affect QNAP operating systems
Affected: before 5.0.1.2346
CVE-2021-34343
7.2
2%
Sep 10
A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero
Affected: before 4.3.3.1693; 4.3.4 before 4.3.6.1750; 4.4.0 before 4.5.4.1715; 5.0.0 before 5.0.0.1716
CVE-2020-2508
7.2
2%
Jan 11
A command injection vulnerability has been reported to affect QTS and QuTS hero
Affected: before 4.5.1.1456
CVE-2020-2492
7.2
2%
Nov 16
If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands
Affected: before 4.4.3.1421
CVE-2020-2490
7.2
2%
Nov 16
If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands
Affected: before 4.4.3.1421
CVE-2024-53693
7.1
0%
Mar 7
An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +3 more
CVE-2023-50359
6.7
0%
Feb 2
An unchecked return value vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +4 more
CVE-2026-24717
6.5
0%
Jun 10
QTS, QuTS hero
Affected: 5.2.0.2737 before 5.2.9.3492
CVE-2025-62858
6.5
0%
Jun 9
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +15 more
CVE-2025-62852
6.5
0%
Jan 2
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +12 more
CVE-2025-48721
6.5
0%
Jan 2
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +12 more
CVE-2025-53593
6.5
0%
Jan 2
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +10 more
CVE-2025-53592
6.5
0%
Jan 2
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +10 more
CVE-2025-53591
6.5
0%
Jan 2
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +10 more
CVE-2025-47208
6.5
0%
Jan 2
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +10 more
CVE-2025-44013
6.5
0%
Jan 2
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +10 more
CVE-2025-53407
6.5
0%
Oct 3
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +8 more
CVE-2025-53406
6.5
0%
Oct 3
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +8 more
CVE-2025-52429
6.5
0%
Oct 3
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +8 more
CVE-2025-48730
6.5
0%
Oct 3
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +8 more
CVE-2025-30274
6.5
0%
Aug 29
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +7 more
CVE-2025-30272
6.5
0%
Aug 29
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +7 more
CVE-2025-30271
6.5
0%
Aug 29
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +7 more
CVE-2025-30270
6.5
0%
Aug 29
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +7 more
CVE-2025-30268
6.5
0%
Aug 29
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +7 more
CVE-2025-30267
6.5
0%
Aug 29
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +7 more
CVE-2025-30265
6.5
0%
Aug 29
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +7 more
CVE-2025-29882
6.5
0%
Aug 29
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +7 more
CVE-2024-37050
6.5
1%
Nov 22
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +1 more
CVE-2024-37049
6.5
1%
Nov 22
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +1 more
CVE-2024-37047
6.5
1%
Nov 22
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +1 more
CVE-2024-21904
6.5
0%
Sep 6
QTS, QuTS hero
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +6 more
CVE-2023-51368
6.5
0%
Sep 6
QTS, QuTS hero
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +5 more
CVE-2023-51366
6.5
0%
Sep 6
QTS, QuTS hero
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +5 more
CVE-2024-21900
6.5
9%
Mar 8
An injection vulnerability has been reported to affect several QNAP operating system versions
Affected: before 5.1.3.2578; 5.1.3.2578
CVE-2023-32967
6.5
0%
Feb 2
An incorrect authorization vulnerability has been reported to affect several QNAP operating system versions
Affected: 4.5.4.1715; 4.5.4.1723; 4.5.4.1741; 4.5.4.1787; 4.5.4.1800; 4.5.4.1892; +6 more
CVE-2023-34972
6.5
0%
Aug 24
A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems
Affected: 5.0.1 before 5.0.1.2425; 5.1.0 before 5.1.0.2444
CVE-2026-41539
6.1
0%
Jun 9
QTS, QuTS hero
Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +17 more
CVE-2023-23372
6.1
0%
Dec 8
A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions
Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.0.1.2034; 5.0.1.2079; 5.0.1.2131; +20 more
CVE-2021-44054
6.1
1%
May 5
An open redirect vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero and QTS
Affected: 5.0.0.1716 before 5.0.0.1986
CVE-2021-44053
6.1
1%
May 5
A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QTS, QuTS hero and QuTScloud
Affected: 5.0.0.1716 before 5.0.0.1986
CVE-2021-38674
6.1
1%
Jan 7
A cross-site scripting (XSS) vulnerability has been reported to affect QTS, QuTS hero and QuTScloud
Affected: before 4.5.4.1787
CVE-2018-19957
6.1
1%
Sep 10
A vulnerability involving insufficient HTTP security headers has been reported to affect QNAP NAS running QTS, QuTS hero, and QuTScloud
Affected: before 4.5.4.1715
CVE-2020-36194
6.1
1%
Jul 1
An XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero
Affected: before 4.5.2.1566
CVE-2018-19942
6.1
1%
Apr 16
A cross-site scripting (XSS) vulnerability has been reported to affect earlier versions of File Station
Affected: before 4.2.6; 4.3.5 before 4.3.6; 4.4.0 before 4.5.1; 4.2.6; 4.2.6; 4.2.6; +34 more
CVE-2020-2498
6.1
1%
Dec 10
If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in certificate configuration
Affected: before 4.5.1.1456
Page 4 of 6 · 283 total
1…3456