QT
Product
QTS
On CISA KEVExploited in the wildRansomware-linked
283
CVEs
7
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 43High 115Medium 120Low 3
Watch
Add QTS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-48728 | 4.9 | Oct 3 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +8 more |
| CVE-2025-48727 | 4.9 | Oct 3 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +8 more |
| CVE-2025-48726 | 4.9 | Oct 3 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +8 more |
| CVE-2025-47214 | 4.9 | Oct 3 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +8 more |
| CVE-2025-47213 | 4.9 | Oct 3 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +8 more |
| CVE-2025-47211 | 4.9 | Oct 3 | A path traversal vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +8 more |
| CVE-2025-33032 | 4.9 | Aug 29 | A path traversal vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +7 more |
| CVE-2024-53698 | 4.9 | Mar 7 | A double free vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +3 more |
| CVE-2024-53696 | 4.9 | Mar 7 | A server-side request forgery (SSRF) vulnerability has been reported to affect QuLog Center Affected: 4.5.1 before 4.5.4.2957 |
| CVE-2024-37048 | 4.9 | Nov 22 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +1 more |
| CVE-2024-37046 | 4.9 | Nov 22 | A path traversal vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +1 more |
| CVE-2024-37045 | 4.9 | Nov 22 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +1 more |
| CVE-2024-37043 | 4.9 | Nov 22 | A path traversal vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +1 more |
| CVE-2024-37042 | 4.9 | Nov 22 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +1 more |
| CVE-2023-45028 | 4.9 | Feb 2 | An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +4 more |
| CVE-2023-45027 | 4.9 | Feb 2 | A path traversal vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +4 more |
| CVE-2023-45026 | 4.9 | Feb 2 | A path traversal vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +4 more |
| CVE-2023-41274 | 4.9 | Feb 2 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +1 more |
| CVE-2023-32970 | 4.9 | Oct 13 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions Affected: 4.5.1 before 4.5.4.2467; 5.0.0.1716 before 5.0.1.2425; 5.1.0 before 5.1.0.2444 |
| CVE-2023-50366 | 4.8 | Sep 6 | QTS, QuTS hero Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +5 more |
| CVE-2023-32969 | 4.8 | Mar 8 | A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch Affected: 5.1.0 before 5.1.4.2596; 5.1.4.2596 |
| CVE-2019-7197 | 4.8 | Dec 4 | A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS Affected: 4.2.6; 4.3.3; 4.3.4; 4.3.6; 4.4.1 |
| CVE-2024-53692 | 4.7 | Mar 7 | A command injection vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +3 more |
| CVE-2024-21906 | 4.7 | Sep 6 | QTS, QuTS hero Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +7 more |
| CVE-2024-21903 | 4.7 | Sep 6 | QTS, QuTS hero Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +5 more |
| CVE-2024-21901 | 4.7 | Mar 8 | A SQL injection vulnerability has been reported to affect myQNAPcloud Affected: before 4.5.4.2627; 4.5.4.2627 |
| CVE-2023-39301 | 4.3 | Nov 3 | A server-side request forgery (SSRF) vulnerability has been reported to affect several QNAP operating system versions Affected: before 5.1.1.2491; before 5.0.1.2514 |
| CVE-2024-32765 | 4.2 | Aug 12 | A vulnerability has been reported to affect Network & Virtual Switch Affected: 5.1.0 before 5.1.8.2823 |
| CVE-2022-27598 | 2.7 | Mar 29 | A vulnerability has been reported to affect QNAP operating systems Affected: before 5.0.1.2346 |
| CVE-2022-27597 | 2.7 | Mar 29 | A vulnerability has been reported to affect QNAP operating systems Affected: before 5.0.1.2346 |
| CVE-2024-32771 | 2.4 | Sep 6 | QTS, QuTS hero Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +10 more |
| CVE-2015-6003 | – | Oct 16 | Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to… Affected: through 4.1.4; through 4.2.0 |
| CVE-2013-7174 | – | Jan 9 | Absolute path traversal vulnerability in cgi-bin/jc.cgi in QNAP QTS before 4.1.0 allows remote attackers to read arbitrary files via a full pathname in the f parameter Affected: through 4.0.3; 4.0 |