QS
Vendor
QNAP Systems Inc.
127
CVEs
9
On KEV
35
New 30D
Products
VS8.8
Video Station
QNAP Systems Inc.
8 CVEs0 on KEV6 new
QC7.2
Qsync Central
QNAP Systems Inc.
6 CVEs0 on KEV6 new
FS9.1
File Station 5
QNAP Systems Inc.
9 CVEs0 on KEV3 new
NS8.5
Notes Station 3
QNAP Systems Inc.
6 CVEs0 on KEV4 new
QU9.8
QuMagie
QNAP Systems Inc.
6 CVEs0 on KEV2 new
HS9.3
HybridDesk Station
QNAP Systems Inc.
2 CVEs0 on KEV2 new
DS8.7
Download Station
QNAP Systems Inc.
4 CVEs0 on KEV3 new
QU7.5
QuRouter
QNAP Systems Inc.
3 CVEs0 on KEV3 new
QS9.3
Qsirch
QNAP Systems Inc.
1 CVEs0 on KEV1 new
SD9.3
sMedio DTCP MOVE
QNAP Systems Inc.
1 CVEs0 on KEV1 new
QC8.7
QcalAgent
QNAP Systems Inc.
2 CVEs0 on KEV1 new
NV6.2
Network & Virtual Switch
QNAP Systems Inc.
1 CVEs0 on KEV1 new
QS6.3
QuFTP Service
QNAP Systems Inc.
1 CVEs0 on KEV1 new
VS8.7
Virtualization Station
QNAP Systems Inc.
1 CVEs0 on KEV1 new
QT9.8
QTS
QNAP Systems Inc.
33 CVEs4 on KEV0 new
QH9.8
QuTS hero
QNAP Systems Inc.
26 CVEs1 on KEV0 new
HE9.8
Helpdesk
QNAP Systems Inc.
2 CVEs1 on KEV0 new
H39.8
HBS 3
QNAP Systems Inc.
1 CVEs1 on KEV0 new
PS9.1
Photo Station
QNAP Systems Inc.
1 CVEs1 on KEV0 new
VN8.8
VioStor NVR
QNAP Systems Inc.
1 CVEs1 on KEV0 new
QC8.7
QuLog Center
QNAP Systems Inc.
3 CVEs0 on KEV0 new
LC4.4
License Center
QNAP Systems Inc.
1 CVEs0 on KEV0 new
MS8.8
Music Station
QNAP Systems Inc.
1 CVEs0 on KEV0 new
NC8.8
Notification Center
QNAP Systems Inc.
1 CVEs0 on KEV0 new
QU7.2
QuFirewall
QNAP Systems Inc.
1 CVEs0 on KEV0 new
QC7.2
QuTS cloud
QNAP Systems Inc.
1 CVEs0 on KEV0 new
QU7.5
QuTScloud
QNAP Systems Inc.
1 CVEs0 on KEV0 new
QV7.2
QVP
QNAP Systems Inc.
1 CVEs0 on KEV0 new
QW7.8
QVPN Windows
QNAP Systems Inc.
1 CVEs0 on KEV0 new
QS6.7
QVR Smart Client
QNAP Systems Inc.
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-50619 | QS Qsirch QNAP Systems Inc. | 9.3 | Oct 15 | Unauthenticated remote code execution vulnerability |
| CVE-2026-47790 | QS QuFTP Service QNAP Systems Inc. | 6.3 | Oct 15 | Privilege Escalation via QuFTP Log-based XSS |
| CVE-2026-47786 | HS HybridDesk Station QNAP Systems Inc. | 9.3 | Oct 15 | Pre-Authentication Command Injection |
| CVE-2026-39997 | HS HybridDesk Station QNAP Systems Inc. | 8.9 | Oct 15 | Unauthenticated Remote Input Injection in QNAP HD Station's remotepad |
| CVE-2026-39991 | NS Notes Station 3 QNAP Systems Inc. | 4.8 | Oct 15 | Stored Cross-Site Scripting (XSS) in Note Station file upload functionality |
| CVE-2026-34009 | NS Notes Station 3 QNAP Systems Inc. | 8.4 | Oct 15 | **Container Escape** Host user home directory mounted with write access into application container |
| CVE-2026-34008 | NS Notes Station 3 QNAP Systems Inc. | 8.5 | Oct 15 | **Privilege Escalation** World-writable crontab path monitored and executed by root-owned process |
| CVE-2026-34007 | NS Notes Station 3 QNAP Systems Inc. | 6.9 | Oct 15 | **RCE** Unsanitized `X-Forwarded-For` header passed to `shell_exec()` via broken IP validation fallback in `getClientIP()` |
| CVE-2026-53882 | VS Virtualization Station QNAP Systems Inc. | 8.7 | Oct 15 | Path Traversal in Virtualization Station VM Import |
| CVE-2026-50612 | QU QuMagie QNAP Systems Inc. | 9.4 | Oct 15 | Import Symlink Following Remote Code Execution Vulnerability in QuMagie |
| CVE-2026-44084 | VS Video Station QNAP Systems Inc. | 7.5 | Oct 15 | Access Code Forgery in Video Station leading to unauthorized media access |
| CVE-2026-41545 | QU QuMagie QNAP Systems Inc. | 8.6 | Oct 15 | WebSocket timelapse path traversal and command injection |
| CVE-2026-41541 | QC Qsync Central QNAP Systems Inc. | 5.3 | Oct 15 | Symlink creation in qsyncsrv.cgi |
| CVE-2026-39989 | DS Download Station QNAP Systems Inc. | 5.3 | Oct 15 | SSRF in QNAP Download Station |
| CVE-2026-34015 | VS Video Station QNAP Systems Inc. | 6.5 | Oct 15 | Remote Code Execution in upload.php of Video Station |
| CVE-2026-34014 | DS Download Station QNAP Systems Inc. | 8.4 | Oct 15 | ds-move-files.sh is writable and executed as root |
| CVE-2026-34006 | SD sMedio DTCP MOVE QNAP Systems Inc. | 9.3 | Oct 15 | Pre-Authentication Multiple Critical Vulnerabilities in QNAP sMedioDTCPServer |
| CVE-2026-26245 | VS Video Station QNAP Systems Inc. | 8.8 | Oct 15 | SQLi#2 SQL Injection in class_videos.php getSmartVideosByOffset |
| CVE-2026-26244 | VS Video Station QNAP Systems Inc. | 8.8 | Oct 15 | SQLi#1 SQL Injection in class_videos.php _getFilters |
| CVE-2026-26243 | QC Qsync Central QNAP Systems Inc. | 7.2 | Oct 15 | Arbitrary Folder Deletion in Qsync Central 5.0.0.5 |
| CVE-2026-41544 | QC QcalAgent QNAP Systems Inc. | 8.7 | Oct 15 | Path Traversal leading to Arbitrary File Move, Docker Escape, and Host RCE in /calapi/renameUpload endpoint |
| CVE-2026-39993 | DS Download Station QNAP Systems Inc. | 8.7 | Oct 15 | Path Traversal to Root RCE in QNAP Download Station via Addon/Search addon Parameter |
| CVE-2026-24723 | FS File Station 5 QNAP Systems Inc. | 6.5 | Oct 15 | NULL Pointer Dereference in utilRequest.cgi |
| CVE-2026-24722 | FS File Station 5 QNAP Systems Inc. | 6.5 | Oct 15 | Null Pointer Dereference in File Station 5 |
| CVE-2026-24721 | FS File Station 5 QNAP Systems Inc. | 6.5 | Oct 15 | Null Pointer Dereference in File Station 5 |
| CVE-2026-24718 | QC Qsync Central QNAP Systems Inc. | 5.3 | Oct 15 | Path Traversal Vulnerability in Qsync Central's qsyncsrv.cgi |
| CVE-2026-24715 | QU QuRouter QNAP Systems Inc. | 5.3 | Oct 15 | Lack of Reproducible Vulnerability Evidence in QNAP Report |
| CVE-2026-22896 | NV Network & Virtual Switch QNAP Systems Inc. | 6.2 | Oct 15 | Stored XSS via Interface Name in Network & Virtual Switch App |
| CVE-2025-68404 | QU QuRouter QNAP Systems Inc. | 7.5 | Oct 15 | vcs_pentest Race Condition Authentication Bypass Vulnerability in QuRouter management interface |
| CVE-2025-68403 | QU QuRouter QNAP Systems Inc. | 4.6 | Oct 15 | Inadequate Steps to Confirm Vulnerability in QuRouter |
| CVE-2025-66275 | VS Video Station QNAP Systems Inc. | 6.5 | Oct 15 | Remote code execution via command injection |
| CVE-2025-66272 | VS Video Station QNAP Systems Inc. | 6.5 | Oct 15 | Arbitrary file deletion and remote code execution |
| CVE-2025-29897 | QC Qsync Central QNAP Systems Inc. | 2.3 | Oct 15 | Stack-based Buffer Overflow in qsyncsrv.cgi |
| CVE-2025-29896 | QC Qsync Central QNAP Systems Inc. | 2.3 | Oct 15 | NULL Pointer Dereference in qsyncsrv.cgi |
| CVE-2025-29895 | QC Qsync Central QNAP Systems Inc. | 2.3 | Oct 15 | NULL Pointer Dereference in qsyncsrv.cgi |
| CVE-2024-27123 | QC QcalAgent QNAP Systems Inc. | 5.2 | Sep 18 | A cross-site scripting (XSS) vulnerability has been reported to affect QcalAgent |
| CVE-2026-26240 | FS File Station 5 QNAP Systems Inc. | 9.1 | Jun 10 | File Station 5 |
| CVE-2026-26241 | FS File Station 5 QNAP Systems Inc. | 9.1 | Jun 10 | File Station 5 |
| CVE-2026-24724 | FS File Station 5 QNAP Systems Inc. | 8.1 | Jun 10 | File Station 5 |
| CVE-2026-26239 | FS File Station 5 QNAP Systems Inc. | 8.1 | Jun 10 | File Station 5 |
| CVE-2026-26237 | QU QuMagie QNAP Systems Inc. | 7.5 | Jun 10 | A missing authorization vulnerability has been reported to affect QuMagie |
| CVE-2026-24719 | QT QTS QNAP Systems Inc. | 7.2 | Jun 10 | QTS, QuTS hero |
| CVE-2026-24717 | QH QuTS hero QNAP Systems Inc. | 6.5 | Jun 10 | QTS, QuTS hero |
| CVE-2026-24716 | QT QTS QNAP Systems Inc. | 7.2 | Jun 10 | QTS, QuTS hero |
| CVE-2026-24720 | FS File Station 5 QNAP Systems Inc. | 6.5 | Jun 10 | File Station 5 |
| CVE-2026-22899 | FS File Station 5 QNAP Systems Inc. | 6.5 | Jun 10 | File Station 5 |
| CVE-2026-22893 | QH QuTS hero QNAP Systems Inc. | 7.2 | Jun 10 | QTS, QuTS hero |
| CVE-2025-66281 | QH QuTS hero QNAP Systems Inc. | 7.2 | Jun 10 | QTS, QuTS hero |
| CVE-2025-66280 | QT QTS QNAP Systems Inc. | 7.2 | Jun 10 | QTS, QuTS hero |
| CVE-2025-66279 | QT QTS QNAP Systems Inc. | 7.2 | Jun 10 | QTS, QuTS hero |
| CVE-2025-66273 | QH QuTS hero QNAP Systems Inc. | 7.2 | Jun 10 | QTS, QuTS hero |
| CVE-2025-62851 | LC License Center QNAP Systems Inc. | 4.4 | Jun 10 | License Center |
| CVE-2025-62850 | QC QuTS cloud QNAP Systems Inc. | 7.2 | Jun 10 | NULL Pointer Dereference in networkRequest.cgi |
| CVE-2025-58468 | NC Notification Center QNAP Systems Inc. | 8.8 | Jun 10 | Notification Center |
| CVE-2025-66276 | QT QTS QNAP Systems Inc. | 9.8 | Jun 10 | QuTS hero is not affected |
| CVE-2026-44083 | QU QuMagie QNAP Systems Inc. | 9.8 | Jun 9 | An authorization bypass through user-controlled key vulnerability has been reported to affect QuMagie |
| CVE-2025-62858 | QH QuTS hero QNAP Systems Inc. | 6.5 | Jun 9 | QTS, QuTS hero |
| CVE-2026-41539 | QH QuTS hero QNAP Systems Inc. | 6.1 | Jun 9 | QTS, QuTS hero |
| CVE-2026-26236 | QU QuMagie QNAP Systems Inc. | 7.5 | Jun 9 | A missing authorization vulnerability has been reported to affect QuMagie |
| CVE-2022-27595 | QW QVPN Windows QNAP Systems Inc. | 7.8 | Dec 19 | QVPN Device Client |