Login Request a demo
QT
Product
QTS
by QNAP Systems Inc. · last CVE Jun 10, 2026
On CISA KEVExploited in the wildRansomware-linked
38
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities38In the news0Timeline
Severity mix
Critical 4High 18Medium 15Low 1
Severity
All severities38Critical4High18Medium15Low1
Exploitation
On CISA KEV4Exploited in the wild4
Watch

Add QTS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-2509
In wildKEV
9.8
34%
Apr 17
Command Injection Vulnerability in QTS and QuTS hero
Affected: before 4.5.2.1566 Build 20210202; before 4.5.1.1495 Build 20201123; before 4.3.6.1620 Build 20210322; before 4.3.4.1632 Build 20210324; before 4.3.3.1624 Build 20210416; before 4.2.6 Build 20210327
CVE-2018-19949
RansomwareIn wildKEV
9.8
30%
Oct 28
QNAP NAS File Station Command Injection Vulnerability
Affected: before 4.4.2.1231; before 4.4.1.1201; before 4.3.6.1218; before 4.3.4.1190; before 4.3.3.1161; before 4.2.6
CVE-2018-19953
RansomwareIn wildKEV
6.1
31%
Oct 28
QNAP NAS File Station Cross-Site Scripting Vulnerability
Affected: before 4.4.2.1231; before 4.4.1.1201; before 4.3.6.1218; before 4.3.4.1190; before 4.3.3.1161; before 4.2.6
CVE-2018-19943
RansomwareIn wildKEV
5.4
23%
Oct 28
QNAP NAS File Station Cross-Site Scripting Vulnerability
Affected: before 4.4.2.1270; before 4.4.1.1261; before 4.3.6.1263; before 4.3.4.1282; before 4.3.3.1252; before 4.2.6
Showing 4