QN
Vendor
Qnap
1,020
CVEs
21
On KEV
9
New 30D
Products
VS9.8
Video Station
Qnap
21 CVEs0 on KEV6 new
FS9.1
File Station
Qnap
57 CVEs0 on KEV3 new
QT10.0
QTS
QNAP
283 CVEs7 on KEV0 new
PS9.8
Photo Station
QNAP
26 CVEs4 on KEV0 new
NA9.8
Network Attached Storage (NAS)
QNAP
4 CVEs4 on KEV0 new
QH10.0
Quts Hero
Qnap
234 CVEs1 on KEV0 new
HE9.8
Helpdesk
Qnap
11 CVEs1 on KEV0 new
HB9.8
Hybrid Backup Sync
Qnap
6 CVEs1 on KEV0 new
QN9.8
QNAP Network-Attached Storage (NAS)
QNAP
1 CVEs1 on KEV0 new
QF8.8
Qvr Firmware
Qnap
1 CVEs1 on KEV0 new
VN8.8
VioStor NVR
QNAP
1 CVEs1 on KEV0 new
QU10.0
Qutscloud
Qnap
63 CVEs0 on KEV0 new
QC8.8
Qsync Central
Qnap
62 CVEs0 on KEV0 new
MS9.8
Media Streaming Add-on
Qnap
13 CVEs0 on KEV0 new
MS9.8
Music Station
Qnap
13 CVEs0 on KEV0 new
QU9.8
Qumagie
Qnap
13 CVEs0 on KEV0 new
QU9.8
Qurouter
Qnap
12 CVEs0 on KEV0 new
QV9.8
Qvr
Qnap
10 CVEs0 on KEV0 new
QC9.8
Qulog Center
Qnap
8 CVEs0 on KEV0 new
NP9.8
Nas Proxy Server
Qnap
7 CVEs0 on KEV0 new
QC8.8
Q'center
Qnap
7 CVEs0 on KEV0 new
LC9.8
License Center
Qnap
6 CVEs0 on KEV0 new
NS9.8
Notes Station 3
Qnap
6 CVEs0 on KEV0 new
QP9.8
Qvr Pro
Qnap
6 CVEs0 on KEV0 new
MC9.8
Multimedia Console
Qnap
5 CVEs0 on KEV0 new
QU9.8
Qunetswitch
Qnap
5 CVEs0 on KEV0 new
QE9.8
Qvr Elite
Qnap
5 CVEs0 on KEV0 new
QG9.8
Qvr Guard
Qnap
5 CVEs0 on KEV0 new
QE7.5
Qes
Qnap
4 CVEs0 on KEV0 new
DS5.4
Download Station
Qnap
3 CVEs0 on KEV0 new
QC8.8
Qcalagent
Qnap
3 CVEs0 on KEV0 new
QU7.2
Qufirewall
Qnap
3 CVEs0 on KEV0 new
QF7.2
Qvp-21a Firmware
Qnap
3 CVEs0 on KEV0 new
QF7.2
Qvp-41a Firmware
Qnap
3 CVEs0 on KEV0 new
QF7.2
Qvp-41b Firmware
Qnap
3 CVEs0 on KEV0 new
QF7.2
Qvp-63a Firmware
Qnap
3 CVEs0 on KEV0 new
QF7.2
Qvp-63b Firmware
Qnap
3 CVEs0 on KEV0 new
QF7.2
Qvp-85a Firmware
Qnap
3 CVEs0 on KEV0 new
QF7.2
Qvp-85b Firmware
Qnap
3 CVEs0 on KEV0 new
QV7.8
Qvpn
Qnap
3 CVEs0 on KEV0 new
SS9.8
Signage Station
Qnap
3 CVEs0 on KEV0 new
SS9.8
Surveillance Station
Qnap
3 CVEs0 on KEV0 new
VN–
Viostor Network Video Recorder
Qnap
3 CVEs0 on KEV0 new
HD9.8
Hyper Data Protector
Qnap
2 CVEs0 on KEV0 new
IL9.8
Iartist Lite
Qnap
2 CVEs0 on KEV0 new
KS9.8
Kazoo Server
Qnap
2 CVEs0 on KEV0 new
MR9.8
Malware Remover
Qnap
2 CVEs0 on KEV0 new
MY7.5
Myqnapcloud
Qnap
2 CVEs0 on KEV0 new
ML9.9
Myqnapcloud Link
Qnap
2 CVEs0 on KEV0 new
NA–
Nas
Qnap
2 CVEs0 on KEV0 new
NR7.8
Netbak Replicator
Qnap
2 CVEs0 on KEV0 new
QV6.1
Q'center Virtual Appliance
Qnap
2 CVEs0 on KEV0 new
QM8.8
Qmailagent
Qnap
2 CVEs0 on KEV0 new
QS7.5
Qss
Qnap
2 CVEs0 on KEV0 new
QU9.8
Qusbcam2
Qnap
2 CVEs0 on KEV0 new
SS–
Surveillance Station Pro
Qnap
2 CVEs0 on KEV0 new
TP–
Ts-239 Pro Turbo Nas
Qnap
2 CVEs0 on KEV0 new
TP–
Ts-639 Pro Turbo Nas
Qnap
2 CVEs0 on KEV0 new
V39.8
Viocard 300 Firmware
Qnap
2 CVEs0 on KEV0 new
AC7.5
AI Core
Qnap
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-44084 | VS Video Station Qnap | 7.5 | Oct 15 | Access Code Forgery in Video Station leading to unauthorized media access |
| CVE-2026-34015 | VS Video Station Qnap | 6.5 | Oct 15 | Remote Code Execution in upload.php of Video Station |
| CVE-2026-26245 | VS Video Station Qnap | 8.8 | Oct 15 | SQLi#2 SQL Injection in class_videos.php getSmartVideosByOffset |
| CVE-2026-26244 | VS Video Station Qnap | 8.8 | Oct 15 | SQLi#1 SQL Injection in class_videos.php _getFilters |
| CVE-2026-24723 | FS File Station Qnap | 6.5 | Oct 15 | NULL Pointer Dereference in utilRequest.cgi |
| CVE-2026-24722 | FS File Station Qnap | 6.5 | Oct 15 | Null Pointer Dereference in File Station 5 |
| CVE-2026-24721 | FS File Station Qnap | 6.5 | Oct 15 | Null Pointer Dereference in File Station 5 |
| CVE-2025-66275 | VS Video Station Qnap | 6.5 | Oct 15 | Remote code execution via command injection |
| CVE-2025-66272 | VS Video Station Qnap | 6.5 | Oct 15 | Arbitrary file deletion and remote code execution |
| CVE-2026-26240 | FS File Station Qnap | 9.1 | Jun 10 | File Station 5 |
| CVE-2026-26241 | FS File Station Qnap | 9.1 | Jun 10 | File Station 5 |
| CVE-2026-24724 | FS File Station Qnap | 8.1 | Jun 10 | File Station 5 |
| CVE-2026-26239 | FS File Station Qnap | 8.1 | Jun 10 | File Station 5 |
| CVE-2026-26237 | QU Qumagie Qnap | 7.5 | Jun 10 | A missing authorization vulnerability has been reported to affect QuMagie |
| CVE-2026-24719 | QT Qts Qnap | 7.2 | Jun 10 | QTS, QuTS hero |
| CVE-2026-24717 | QH Quts Hero Qnap | 6.5 | Jun 10 | QTS, QuTS hero |
| CVE-2026-24716 | QH Quts Hero Qnap | 7.2 | Jun 10 | QTS, QuTS hero |
| CVE-2026-24720 | FS File Station Qnap | 6.5 | Jun 10 | File Station 5 |
| CVE-2026-22899 | FS File Station Qnap | 6.5 | Jun 10 | File Station 5 |
| CVE-2026-22893 | QT Qts Qnap | 7.2 | Jun 10 | QTS, QuTS hero |
| CVE-2025-66281 | QT Qts Qnap | 7.2 | Jun 10 | QTS, QuTS hero |
| CVE-2025-66280 | QT Qts Qnap | 7.2 | Jun 10 | QTS, QuTS hero |
| CVE-2025-66279 | QT Qts Qnap | 7.2 | Jun 10 | QTS, QuTS hero |
| CVE-2025-66273 | QT Qts Qnap | 7.2 | Jun 10 | QTS, QuTS hero |
| CVE-2025-62851 | LC License Center Qnap | 4.4 | Jun 10 | License Center |
| CVE-2025-62850 | QH Quts Hero Qnap | 7.2 | Jun 10 | NULL Pointer Dereference in networkRequest.cgi |
| CVE-2025-58468 | NC Notification Center Qnap | 8.8 | Jun 10 | Notification Center |
| CVE-2025-66276 | QT Qts Qnap | 9.8 | Jun 10 | QuTS hero is not affected |
| CVE-2026-44083 | QU Qumagie Qnap | 9.8 | Jun 9 | An authorization bypass through user-controlled key vulnerability has been reported to affect QuMagie |
| CVE-2025-62858 | QT Qts Qnap | 6.5 | Jun 9 | QTS, QuTS hero |
| CVE-2026-41539 | QH Quts Hero Qnap | 6.1 | Jun 9 | QTS, QuTS hero |
| CVE-2026-26236 | QU Qumagie Qnap | 7.5 | Jun 9 | A missing authorization vulnerability has been reported to affect QuMagie |
| CVE-2026-22902 | QU Qunetswitch Qnap | 6.7 | Mar 20 | A command injection vulnerability has been reported to affect QuNetSwitch |
| CVE-2026-22901 | QU Qunetswitch Qnap | 9.8 | Mar 20 | A command injection vulnerability has been reported to affect QuNetSwitch |
| CVE-2026-22900 | QU Qunetswitch Qnap | 9.8 | Mar 20 | A use of hard-coded credentials vulnerability has been reported to affect QuNetSwitch |
| CVE-2026-22898 | QP Qvr Pro Qnap | 9.8 | Mar 20 | A missing authentication for critical function vulnerability has been reported to affect QVR Pro |
| CVE-2026-22897 | QU Qunetswitch Qnap | 9.8 | Mar 20 | A command injection vulnerability has been reported to affect QuNetSwitch |
| CVE-2026-22895 | QU Quftp Qnap | 4.8 | Mar 20 | A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service |
| CVE-2025-62846 | QU Qurouter Qnap | 6.7 | Mar 20 | An SQL injection vulnerability has been reported to affect QHora |
| CVE-2025-62845 | QU Qurouter Qnap | 6.7 | Mar 20 | An improper neutralization of escape, meta, or control sequences vulnerability has been reported to affect QHora |
| CVE-2025-62844 | QU Qurouter Qnap | 5.5 | Mar 20 | A weak authentication vulnerability has been reported to affect QHora |
| CVE-2025-62843 | QU Qurouter Qnap | 6.8 | Mar 20 | An improper restriction of communication channel to intended endpoints vulnerability has been reported to affect QHora |
| CVE-2025-59383 | MS Media Streaming Add-on Qnap | 9.1 | Mar 20 | A buffer overflow vulnerability has been reported to affect Media Streaming Add-On |
| CVE-2025-59388 | HD Hyper Data Protector Qnap | 9.8 | Mar 12 | A use of hard-coded password vulnerability has been reported to affect Hyper Data Protector |
| CVE-2024-14026 | QT Qts Qnap | 7.8 | Mar 11 | A command injection vulnerability has been reported to affect several QNAP operating system versions |
| CVE-2024-14025 | VS Video Station Qnap | 6.7 | Mar 11 | An SQL injection vulnerability has been reported to affect Video Station |
| CVE-2024-14024 | VS Video Station Qnap | 6.7 | Mar 11 | An improper certificate validation vulnerability has been reported to affect Video Station |
| CVE-2026-22894 | FS File Station Qnap | 6.5 | Feb 11 | A path traversal vulnerability has been reported to affect File Station 6 |
| CVE-2025-68406 | QC Qsync Central Qnap | 6.5 | Feb 11 | A path traversal vulnerability has been reported to affect Qsync Central |
| CVE-2025-66278 | FS File Station Qnap | 6.5 | Feb 11 | A path traversal vulnerability has been reported to affect File Station 5 |
| CVE-2025-66277 | QH Quts Hero Qnap | 9.8 | Feb 11 | A link following vulnerability has been reported to affect several QNAP operating system versions |
| CVE-2025-66274 | QH Quts Hero Qnap | 4.9 | Feb 11 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions |
| CVE-2025-62856 | FS File Station Qnap | 4.4 | Feb 11 | A path traversal vulnerability has been reported to affect File Station 5 |
| CVE-2025-62855 | FS File Station Qnap | 4.4 | Feb 11 | A path traversal vulnerability has been reported to affect File Station 5 |
| CVE-2025-62854 | FS File Station Qnap | 6.5 | Feb 11 | An uncontrolled resource consumption vulnerability has been reported to affect File Station 5 |
| CVE-2025-62853 | FS File Station Qnap | 6.5 | Feb 11 | A path traversal vulnerability has been reported to affect File Station 5 |
| CVE-2025-59386 | QH Quts Hero Qnap | 4.9 | Feb 11 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions |
| CVE-2025-58472 | QC Qsync Central Qnap | 4.9 | Feb 11 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central |
| CVE-2025-58471 | QC Qsync Central Qnap | 4.9 | Feb 11 | An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central |
| CVE-2025-58470 | QC Qsync Central Qnap | 6.5 | Feb 11 | A path traversal vulnerability has been reported to affect Qsync Central |
