QH
Product
Quts Hero
On CISA KEVExploited in the wild
234
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 15High 107Medium 109Low 3
Watch
Add Quts Hero to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-28798 | 7.5 | May 21 | A relative path traversal vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero Affected: before h4.5.2.1638 |
| CVE-2018-19941 | 7.5 | Dec 31 | A vulnerability has been reported to affect QNAP NAS Affected: before h4.5.1.1472 |
| CVE-2026-24719 | 7.2 | Jun 10 | QTS, QuTS hero Affected: h5.0.0 before h5.2.9.3499 |
| CVE-2026-24716 | 7.2 | Jun 10 | QTS, QuTS hero Affected: h5.0.0 before h5.2.9.3499; h5.3.0.3115 before h5.3.4.3500; h6.0.0.3324 before h6.0.0.3459 |
| CVE-2026-22893 | 7.2 | Jun 10 | QTS, QuTS hero Affected: h5.2.0.2737 before h5.2.9.3410; h5.3.0.3115 before h5.3.4.3500; h6.0.0.3324 before h6.0.0.3459 |
| CVE-2025-66281 | 7.2 | Jun 10 | QTS, QuTS hero Affected: h5.2.0.2737 before h5.2.9.3410; h5.3.0.3115 before h5.3.4.3500; h6.0.0.3324 before h6.0.0.3397 |
| CVE-2025-66280 | 7.2 | Jun 10 | QTS, QuTS hero Affected: h5.2.0.2737 before h5.2.9.3410; h5.3.0.3115 before h5.3.4.3500; h6.0.0.3324 before h6.0.0.3397 |
| CVE-2025-66279 | 7.2 | Jun 10 | QTS, QuTS hero Affected: h5.2.0.2737 before h5.2.9.3410; h5.3.0.3115 before h5.3.4.3500; h6.0.0.3324 before h6.0.0.3397 |
| CVE-2025-66273 | 7.2 | Jun 10 | QTS, QuTS hero Affected: h5.2.0.2737 before h5.2.9.3410; h5.3.0.3115 before h5.3.4.3500; h6.0.0.3324 before h6.0.0.3397 |
| CVE-2025-62850 | 7.2 | Jun 10 | NULL Pointer Dereference in networkRequest.cgi Affected: h5.2.0.2737 before h5.2.9.3410; h5.3.0.3115 before h5.3.4.3500; h6.0.0.3324 before h6.0.0.3459 |
| CVE-2025-47212 | 7.2 | Oct 3 | QTS, QuTS hero Affected: h5.2.0.2737; h5.2.0.2782; h5.2.0.2789; h5.2.0.2802; h5.2.0.2823; h5.2.0.2851; +8 more |
| CVE-2024-53699 | 7.2 | Mar 7 | An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions Affected: h5.2.0.2737; h5.2.0.2782; h5.2.0.2789; h5.2.0.2802; h5.2.0.2823; h5.2.0.2851; +4 more |
| CVE-2024-53697 | 7.2 | Mar 7 | An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions Affected: h5.2.0.2737; h5.2.0.2782; h5.2.0.2789; h5.2.0.2802; h5.2.0.2823; h5.2.0.2851; +4 more |
| CVE-2024-38638 | 7.2 | Mar 7 | An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534; +9 more |
| CVE-2024-50403 | 7.2 | Dec 6 | A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534; +18 more |
| CVE-2024-50402 | 7.2 | Dec 6 | A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534; +18 more |
| CVE-2024-50401 | 7.2 | Nov 22 | A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions Affected: h5.2.0.2737; h5.2.0.2782; h5.2.0.2789; h5.2.0.2802; h5.2.0.2823; h5.2.0.2851; +1 more |
| CVE-2024-50400 | 7.2 | Nov 22 | A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions Affected: h5.2.0.2737; h5.2.0.2782; h5.2.0.2789; h5.2.0.2802; h5.2.0.2823; h5.2.0.2851; +1 more |
| CVE-2024-50399 | 7.2 | Nov 22 | A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions Affected: h5.2.0.2737; h5.2.0.2782; h5.2.0.2789; h5.2.0.2802; h5.2.0.2823; h5.2.0.2851; +1 more |
| CVE-2024-50398 | 7.2 | Nov 22 | A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions Affected: h5.2.0.2737; h5.2.0.2782; h5.2.0.2789; h5.2.0.2802; h5.2.0.2823; h5.2.0.2851; +1 more |
| CVE-2024-37044 | 7.2 | Nov 22 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: h5.2.0.2737; h5.2.0.2782; h5.2.0.2789; h5.2.0.2802; h5.2.0.2823; h5.2.0.2851; +1 more |
| CVE-2024-37041 | 7.2 | Nov 22 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: h5.2.0.2737; h5.2.0.2782; h5.2.0.2789; h5.2.0.2802; h5.2.0.2823; h5.2.0.2851; +1 more |
| CVE-2023-34979 | 7.2 | Sep 6 | QTS, QuTS hero Affected: h4.5.4.1771; h4.5.4.1800; h4.5.4.1813; h4.5.4.1848; h4.5.4.1892; h4.5.4.1951; +9 more |
| CVE-2023-47567 | 7.2 | Feb 2 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions Affected: h4.5.4.1771; h4.5.4.1800; h4.5.4.1813; h4.5.4.1848; h4.5.4.1892; h4.5.4.1951; +18 more |
| CVE-2023-47566 | 7.2 | Feb 2 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534; +3 more |
| CVE-2023-45037 | 7.2 | Feb 2 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534; +1 more |
| CVE-2023-45036 | 7.2 | Feb 2 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534; +1 more |
| CVE-2023-45035 | 7.2 | Feb 2 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534; +2 more |
| CVE-2023-41292 | 7.2 | Feb 2 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534; +2 more |
| CVE-2023-41283 | 7.2 | Feb 2 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534; +2 more |
| CVE-2023-41282 | 7.2 | Feb 2 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534; +3 more |
| CVE-2023-41281 | 7.2 | Feb 2 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534; +2 more |
| CVE-2023-41280 | 7.2 | Feb 2 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534 |
| CVE-2023-41279 | 7.2 | Feb 2 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534 |
| CVE-2023-41278 | 7.2 | Feb 2 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534 |
| CVE-2023-41277 | 7.2 | Feb 2 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534 |
| CVE-2023-41276 | 7.2 | Feb 2 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534 |
| CVE-2023-41275 | 7.2 | Feb 2 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534 |
| CVE-2023-41273 | 7.2 | Feb 2 | A heap-based buffer overflow vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534 |
| CVE-2023-39302 | 7.2 | Feb 2 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534; +1 more |
| CVE-2023-45044 | 7.2 | Jan 5 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534; +1 more |
| CVE-2023-45043 | 7.2 | Jan 5 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534; +1 more |
| CVE-2023-45042 | 7.2 | Jan 5 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534; +1 more |
| CVE-2023-45041 | 7.2 | Jan 5 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534; +1 more |
| CVE-2023-45040 | 7.2 | Jan 5 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534; +1 more |
| CVE-2023-45039 | 7.2 | Jan 5 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534; +1 more |
| CVE-2023-39294 | 7.2 | Jan 5 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534 |
| CVE-2023-32975 | 7.2 | Dec 8 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.0.1.2045; +6 more |
| CVE-2023-32968 | 7.2 | Dec 8 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.0.1.2045; +6 more |
| CVE-2023-23367 | 7.2 | Nov 10 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions Affected: h5.0.0.1772; h5.0.0.1844; h5.0.0.1856; h5.0.0.1892; h5.0.0.1900; h5.0.0.1949; +10 more |