Login Request a demo
QT
Product
QTS
by QNAP Systems Inc. · last CVE Jun 10, 2026
On CISA KEVExploited in the wildRansomware-linked
33
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities33In the news0Timeline
Severity mix
Critical 3High 17Medium 12Low 1
Severity
All severities33Critical3High17Medium12Low1
Exploitation
On CISA KEV4Exploited in the wild4
Watch

Add QTS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-2509
In wildKEV
9.8
34%
Apr 17
Command Injection Vulnerability in QTS and QuTS hero
Affected: before 4.5.2.1566 Build 20210202; before 4.5.1.1495 Build 20201123; before 4.3.6.1620 Build 20210322; before 4.3.4.1632 Build 20210324; before 4.3.3.1624 Build 20210416; before 4.2.6 Build 20210327
CVE-2018-19949
RansomwareIn wildKEV
9.8
30%
Oct 28
QNAP NAS File Station Command Injection Vulnerability
Affected: before 4.4.2.1231; before 4.4.1.1201; before 4.3.6.1218; before 4.3.4.1190; before 4.3.3.1161; before 4.2.6
CVE-2018-19953
RansomwareIn wildKEV
6.1
31%
Oct 28
QNAP NAS File Station Cross-Site Scripting Vulnerability
Affected: before 4.4.2.1231; before 4.4.1.1201; before 4.3.6.1218; before 4.3.4.1190; before 4.3.3.1161; before 4.2.6
CVE-2018-19943
RansomwareIn wildKEV
5.4
23%
Oct 28
QNAP NAS File Station Cross-Site Scripting Vulnerability
Affected: before 4.4.2.1270; before 4.4.1.1261; before 4.3.6.1263; before 4.3.4.1282; before 4.3.3.1252; before 4.2.6
CVE-2025-66276
9.8
0%
Jun 10
QuTS hero is not affected
Affected: 5.2.0 before 5.2.7.3256 build 20250913
CVE-2024-32763
8.8
1%
Sep 6
QTS, QuTS hero
Affected: 5.1.x before 5.1.8.2823 build 20240712
CVE-2023-34974
8.8
1%
Sep 6
QTS, QuTS hero, QuTScloud, QVR, QES
Affected: 4.5.x before 4.5.4.2790 build 20240605
CVE-2024-21898
8.8
1%
Sep 6
QTS, QuTS hero
Affected: 5.1.x before 5.1.6.2722 build 20240402
CVE-2023-51367
8.8
0%
Sep 6
QTS, QuTS hero
Affected: 5.1.x before 5.1.6.2722 build 20240402
CVE-2024-38641
7.8
1%
Sep 6
QTS, QuTS hero
Affected: 5.1.x before 5.1.8.2823 build 20240712
CVE-2023-39298
7.8
0%
Sep 6
QTS, QuTS hero
Affected: 5.1.x before 5.2.0.2737 build 20240417
CVE-2022-27600
7.5
1%
Dec 19
QTS, QuTS hero, QuTScloud
Affected: 5.0.x before 5.0.1.2277; 4.5.x before 4.5.4.2280 build 20230112
CVE-2026-24719
7.2
1%
Jun 10
QTS, QuTS hero
Affected: 5.2.0 before 5.2.9.3492 build 20260507
CVE-2026-24716
7.2
0%
Jun 10
QTS, QuTS hero
Affected: 5.2.0 before 5.2.9.3492 build 20260507
CVE-2026-22893
7.2
1%
Jun 10
QTS, QuTS hero
Affected: 5.2.0 before 5.2.9.3410 build 20260214
CVE-2025-66281
7.2
0%
Jun 10
QTS, QuTS hero
Affected: 5.2.0 before 5.2.9.3410 build 20260214
CVE-2025-66280
7.2
0%
Jun 10
QTS, QuTS hero
Affected: 5.2.0 before 5.2.9.3410 build 20260214
CVE-2025-66279
7.2
1%
Jun 10
QTS, QuTS hero
Affected: 5.2.0 before 5.2.9.3410 build 20260214
CVE-2025-66273
7.2
1%
Jun 10
QTS, QuTS hero
Affected: 5.2.0 before 5.2.9.3410 build 20260214
CVE-2025-62850
7.2
0%
Jun 10
NULL Pointer Dereference in networkRequest.cgi
Affected: 5.2.x before 5.2.9.3410 build 20260214
CVE-2023-34979
7.2
1%
Sep 6
QTS, QuTS hero
Affected: 4.5.x before 4.5.4.2790 build 20240605
CVE-2023-39300
7.2
1%
Sep 6
An OS command injection vulnerability has been reported to affect legacy QTS
Affected: 4.3.6 before 4.3.6.2805 build 20240619; 4.3.4 before 4.3.4.2814 build 20240618; 4.3.3 before 4.3.3.2784 build 20240619; 4.2.6 before 4.2.6 build 20240618
CVE-2026-24717
6.5
0%
Jun 10
QTS, QuTS hero
Affected: 5.2.0 before 5.2.9.3492 build 20260507
CVE-2025-62858
6.5
0%
Jun 9
QTS, QuTS hero
Affected: 5.2.0 before 5.2.9.3410 build 20260214
CVE-2024-21904
6.5
0%
Sep 6
QTS, QuTS hero
Affected: 5.1.x before 5.1.7.2770 build 20240520
CVE-2023-51368
6.5
0%
Sep 6
QTS, QuTS hero
Affected: 5.1.x before 5.1.6.2722 build 20240402
CVE-2023-51366
6.5
0%
Sep 6
QTS, QuTS hero
Affected: 5.1.x before 5.1.6.2722 build 20240402
CVE-2026-41539
6.1
0%
Jun 9
QTS, QuTS hero
Affected: 5.2.0 before 5.2.9.3492 build 20260507
CVE-2024-21897
5.4
0%
Sep 6
QTS, QuTS hero
Affected: 5.1.x before 5.1.6.2722 build 20240402
CVE-2023-50366
4.8
0%
Sep 6
QTS, QuTS hero
Affected: 5.1.x before 5.1.6.2722 build 20240402
CVE-2024-21906
4.7
1%
Sep 6
QTS, QuTS hero
Affected: 5.1.x before 5.1.8.2823 build 20240712
CVE-2024-21903
4.7
1%
Sep 6
QTS, QuTS hero
Affected: 5.1.x before 5.1.6.2722 build 20240402
CVE-2024-32771
2.4
0%
Sep 6
QTS, QuTS hero
Affected: 5.1.x before 5.2.0.2782 build 20240601
Showing 33