QH
Product
QuTS hero
On CISA KEVExploited in the wild
96
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 27Medium 64Low 1
Watch
Add QuTS hero to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-2509 In wildKEV | 9.8 | Apr 17 | Command Injection Vulnerability in QTS and QuTS hero Affected: before h4.5.1.1491 build 20201119 |
| CVE-2025-66277 | 9.8 | Feb 11 | QTS, QuTS hero Affected: h5.3.x before h5.3.2.3354 build 20251225; h5.2.x before h5.2.8.3350 build 20251216 |
| CVE-2025-59385 | 9.8 | Dec 16 | QTS, QuTS hero Affected: h5.2.x before h5.2.7.3297 build 20251024; h5.3.x before h5.3.1.3292 build 20251024 |
| CVE-2025-62849 | 9.8 | Dec 16 | QTS, QuTS hero Affected: h5.2.x before h5.2.7.3297 build 20251024; h5.3.x before h5.3.1.3292 build 20251024 |
| CVE-2025-30264 | 8.8 | Aug 29 | QTS, QuTS hero Affected: h5.2.x before h5.2.5.3138 build 20250519 |
| CVE-2025-22481 | 8.8 | Jun 6 | QTS, QuTS hero Affected: h5.2.x before h5.2.4.3079 build 20250321 |
| CVE-2024-32763 | 8.8 | Sep 6 | QTS, QuTS hero Affected: h5.1.x before h5.1.8.2823 build 20240712 |
| CVE-2023-34974 | 8.8 | Sep 6 | QTS, QuTS hero, QuTScloud, QVR, QES Affected: h4.5.x before h4.5.4.2626 build 20231225 |
| CVE-2024-21898 | 8.8 | Sep 6 | QTS, QuTS hero Affected: h5.1.x before h5.1.6.2734 build 20240414 |
| CVE-2025-48725 | 8.1 | Feb 11 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions Affected: h5.3.x before h5.3.2.3354 build 20251225 |
| CVE-2025-52872 | 8.1 | Jan 2 | QTS, QuTS hero Affected: h5.2.x before h5.2.7.3256 build 20250913; h5.3.x before h5.3.0.3192 build 20250716 |
| CVE-2025-52864 | 8.1 | Jan 2 | QTS, QuTS hero Affected: h5.2.x before h5.2.7.3256 build 20250913; h5.3.x before h5.3.0.3192 build 20250716 |
| CVE-2025-52863 | 8.1 | Jan 2 | QTS, QuTS hero Affected: h5.2.x before h5.2.7.3256 build 20250913; h5.3.x before h5.3.0.3192 build 20250716 |
| CVE-2025-30273 | 8.1 | Aug 29 | QTS, QuTS hero Affected: h5.2.x before h5.2.5.3138 build 20250519 |
| CVE-2024-14026 | 7.8 | Mar 11 | QTS, QuTS hero Affected: h5.1.x before h5.1.9.2954 build 20241120; h5.2.x before h5.2.3.3006 build 20250108 |
| CVE-2024-38641 | 7.8 | Sep 6 | QTS, QuTS hero Affected: h5.1.x before h5.1.8.2823 build 20240712 |
| CVE-2023-39298 | 7.8 | Sep 6 | QTS, QuTS hero Affected: h5.1.x before h5.2.0.2782 build 20240601 |
| CVE-2025-9110 | 7.5 | Jan 2 | QTS, QuTS hero Affected: h5.2.x before h5.2.8.3321 build 20251117; h5.3.x before h5.3.1.3250 build 20250912 |
| CVE-2025-62847 | 7.5 | Dec 16 | QTS, QuTS hero Affected: h5.2.x before h5.2.7.3297 build 20251024; h5.3.x before h5.3.1.3292 build 20251024 |
| CVE-2025-62848 | 7.5 | Dec 16 | QTS, QuTS hero Affected: h5.2.x before h5.2.7.3297 build 20251024; h5.3.x before h5.3.1.3292 build 20251024 |
| CVE-2022-27600 | 7.5 | Dec 19 | QTS, QuTS hero, QuTScloud Affected: h5.0.x before h5.0.1.2277 build 20230112; h4.5.x before h4.5.4.2374 build 20230417 |
| CVE-2026-24719 | 7.2 | Jun 10 | QTS, QuTS hero Affected: h5.2.0 before h5.2.9.3499 build 20260514 |
| CVE-2026-24716 | 7.2 | Jun 10 | QTS, QuTS hero Affected: h5.2.0 before h5.2.9.3499 build 20260514; h5.3.0 before h5.3.4.3500 build 20260520; ? before h6.0.0.3459 build 20260409 |
| CVE-2026-22893 | 7.2 | Jun 10 | QTS, QuTS hero Affected: h5.2.0 before h5.2.9.3410 build 20260214; h5.3.0 before h5.3.4.3500 build 20260520; ? before h6.0.0.3459 build 20260409 |
| CVE-2025-66281 | 7.2 | Jun 10 | QTS, QuTS hero Affected: h5.2.0 before h5.2.9.3410 build 20260214; h5.3.0 before h5.3.4.3500 build 20260520; ? before h6.0.0.3397 build 20260206 |
| CVE-2025-66280 | 7.2 | Jun 10 | QTS, QuTS hero Affected: h5.2.0 before h5.2.9.3410 build 20260214; h5.3.0 before h5.3.4.3500 build 20260520; ? before h6.0.0.3397 build 20260206 |
| CVE-2025-66279 | 7.2 | Jun 10 | QTS, QuTS hero Affected: h5.2.0 before h5.2.9.3410 build 20260214; h5.3.0 before h5.3.4.3500 build 20260520; ? before h6.0.0.3397 build 20260206 |
| CVE-2025-66273 | 7.2 | Jun 10 | QTS, QuTS hero Affected: h5.2.0 before h5.2.9.3410 build 20260214; h5.3.0 before h5.3.4.3500 build 20260520; ? before h6.0.0.3397 build 20260206 |
| CVE-2025-62850 | 7.2 | Jun 10 | NULL Pointer Dereference in networkRequest.cgi Affected: h5.2.x before h5.2.9.3410 build 20260214; h5.3.x before h5.3.4.3500 build 20260520; h6.0.x before h6.0.0.3459 build 20260409 |
| CVE-2025-47212 | 7.2 | Oct 3 | QTS, QuTS hero Affected: h5.2.x before h5.2.6.3195 build 20250715 |
| CVE-2023-34979 | 7.2 | Sep 6 | QTS, QuTS hero Affected: h4.5.x before h4.5.4.2790 build 20240606 |
| CVE-2026-24717 | 6.5 | Jun 10 | QTS, QuTS hero Affected: h5.2.0 before h5.2.9.3499 build 20260514; h5.3.0 before h5.3.4.3500 build 20260520; ? before h6.0.0.3459 build 20260409 |
| CVE-2025-62858 | 6.5 | Jun 9 | QTS, QuTS hero Affected: h5.2.0 before h5.2.9.3410 build 20260214; h5.3.0 before h5.3.4.3500 build 20260520; ? before h6.0.0.3397 build 20260206 |
| CVE-2025-53593 | 6.5 | Jan 2 | QTS, QuTS hero Affected: h5.2.x before h5.2.7.3256 build 20250913; h5.3.x before h5.3.1.3250 build 20250912 |
| CVE-2025-53592 | 6.5 | Jan 2 | QTS, QuTS hero Affected: h5.2.x before h5.2.7.3256 build 20250913; h5.3.x before h5.3.1.3250 build 20250912 |
| CVE-2025-53591 | 6.5 | Jan 2 | QTS, QuTS hero Affected: h5.3.x before h5.3.1.3250 build 20250912; h5.2.x before h5.2.7.3256 build 20250913 |
| CVE-2025-47208 | 6.5 | Jan 2 | QTS, QuTS hero Affected: h5.2.x before h5.2.6.3195 build 20250715 |
| CVE-2025-44013 | 6.5 | Jan 2 | QTS, QuTS hero Affected: h5.2.x before h5.2.6.3195 build 20250715 |
| CVE-2025-53407 | 6.5 | Oct 3 | QTS, QuTS hero Affected: h5.2.x before h5.2.6.3195 build 20250715 |
| CVE-2025-53406 | 6.5 | Oct 3 | QTS, QuTS hero Affected: h5.2.x before h5.2.6.3195 build 20250715 |
| CVE-2025-52429 | 6.5 | Oct 3 | QTS, QuTS hero Affected: h5.2.x before h5.2.6.3195 build 20250715 |
| CVE-2025-48730 | 6.5 | Oct 3 | QTS, QuTS hero Affected: h5.2.x before h5.2.6.3195 build 20250715 |
| CVE-2025-30274 | 6.5 | Aug 29 | QTS, QuTS hero Affected: h5.2.x before h5.2.5.3138 build 20250519 |
| CVE-2025-30272 | 6.5 | Aug 29 | QTS, QuTS hero Affected: h5.2.x before h5.2.5.3138 build 20250519 |
| CVE-2025-30271 | 6.5 | Aug 29 | QTS, QuTS hero Affected: h5.2.x before h5.2.5.3138 build 20250519 |
| CVE-2025-30270 | 6.5 | Aug 29 | QTS, QuTS hero Affected: h5.2.x before h5.2.5.3138 build 20250519 |
| CVE-2025-30268 | 6.5 | Aug 29 | QTS, QuTS hero Affected: h5.2.x before h5.2.5.3138 build 20250519 |
| CVE-2025-30267 | 6.5 | Aug 29 | QTS, QuTS hero Affected: h5.2.x before h5.2.5.3138 build 20250519 |
| CVE-2025-30265 | 6.5 | Aug 29 | QTS, QuTS hero Affected: h5.2.x before h5.2.5.3138 build 20250519 |
| CVE-2025-29882 | 6.5 | Aug 29 | QTS, QuTS hero Affected: h5.2.x before h5.2.5.3138 build 20250519 |