Login Request a demo
QH
Product
Quts Hero
by Qnap · last CVE Jun 10, 2026
On CISA KEVExploited in the wild
234
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities234In the news3Timeline
Severity mix
Critical 15High 107Medium 109Low 3
Severity
All severities234Critical15High107Medium109Low3
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Quts Hero to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-2509
In wildKEV
9.8
34%
Apr 17
Command Injection Vulnerability in QTS and QuTS hero
Affected: before h4.5.1; h4.5.1; h4.5.1.1472
CVE-2024-32766
10.0
2%
Apr 26
An OS command injection vulnerability has been reported to affect several QNAP operating system versions
Affected: h4.5.0 before h4.5.4.2626; h5.0.0 before h5.1.3.2578; h4.5.4.2626; h5.1.3.2578
CVE-2025-66277
9.8
1%
Feb 11
QTS, QuTS hero
Affected: h5.2.0.2737; h5.2.0.2782; h5.2.0.2789; h5.2.0.2802; h5.2.0.2823; h5.2.0.2851; +12 more
CVE-2025-59385
9.8
1%
Dec 16
QTS, QuTS hero
Affected: h5.2.0.2737; h5.2.0.2782; h5.2.0.2789; h5.2.0.2802; h5.2.0.2823; h5.2.0.2851; +14 more
CVE-2025-62849
9.8
1%
Dec 16
QTS, QuTS hero
Affected: h5.2.0.2737; h5.2.0.2782; h5.2.0.2789; h5.2.0.2802; h5.2.0.2823; h5.2.0.2851; +14 more
CVE-2024-50393
9.8
1%
Dec 6
A command injection vulnerability has been reported to affect several QNAP operating system versions
Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534; +18 more
CVE-2024-21899
9.8
24%
Mar 8
An improper authentication vulnerability has been reported to affect several QNAP operating system versions
Affected: before h4.5.4.2626; h5.1.0 before h5.1.3.2578; h4.5.4.2626; h5.1.3.2578
CVE-2023-45025
9.8
1%
Feb 2
An OS command injection vulnerability has been reported to affect several QNAP operating system versions
Affected: h4.5.4.1771; h4.5.4.1800; h4.5.4.1813; h4.5.4.1848; h4.5.4.1892; h4.5.4.1951; +17 more
CVE-2023-39303
9.8
0%
Feb 2
An improper authentication vulnerability has been reported to affect several QNAP operating system versions
Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534; +1 more
CVE-2023-23368
9.8
19%
Nov 3
An OS command injection vulnerability has been reported to affect several QNAP operating system versions
Affected: h5.0.1.2045; h5.0.1.2192; h5.0.1.2248; h5.0.1.2269; h5.0.1.2277; h5.0.1.2348; +12 more
CVE-2022-27596
9.8
3%
Jan 30
A vulnerability has been reported to affect QNAP device running QuTS hero, QTS
Affected: h5.0.1 before h5.0.1.2248
CVE-2021-28804
9.8
2%
Jul 1
A command injection vulnerabilities have been reported to affect QTS and QuTS hero
Affected: through h4.5.1.1582
CVE-2021-28802
9.8
2%
Jul 1
A command injection vulnerabilities have been reported to affect QTS and QuTS hero
Affected: before h4.5.1.1582
CVE-2019-7198
9.8
3%
Dec 10
This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application
Affected: before h4.5.1.1472
CVE-2024-48859
9.1
1%
Dec 6
An improper authentication vulnerability has been reported to affect several QNAP operating system versions
Affected: h5.1.0.2409; h5.1.0.2424; h5.1.0.2453; h5.1.0.2466; h5.1.1.2488; h5.1.2.2534; +18 more
Showing 15