CVE-2020-36873

Astak CM-818T3 Unauthenticated Configuration Disclosure

Astak CM-818T3 2.4GHz wireless security surveillance cameras contain an unauthenticated configuration disclosure vulnerability in the /web/cgi-bin/hi3510/backup.cgi endpoint. The endpoint permits remote download of a compressed configuration backup without requiring authentication or authorization. The exposed backup may include administrative credentials and other sensitive device settings, enabling an unauthenticated remote attacker to obtain information that could facilitate further compromise of the camera or connected network.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Astak Qnap

Products

Cm-818t3 Surveillance Station

CVE-2012-10047

Cyclope Employee Surveillance Solution v6.x SQL Injection

Cyclope Employee Surveillance Solution versions 6.x are vulnerable to a SQL injection flaw in its login mechanism. The username parameter in the auth-login POST request is not properly sanitized, allowing attackers to inject arbitrary SQL statements. This can be leveraged to write and execute a malicious PHP file on disk, resulting in remote code execution under the SYSTEM user context.

CVSS 4.0 · 10 Critical EPSS 1.5% KEV · Not listed

Vendors

Qnap

Products

Surveillance Station

CVE-2026-41539

QTS, QuTS hero

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3492 build 20260507 and later QuTS hero h5.2.9.3499 build 20260514 and later QuTS hero h5.3.4.3500 build 20260520 and later QuTS hero h6.0.0.3500 build 20260520 and later

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems Inc.

Products

Qts Quts Hero Qts and 1 more

CVE-2026-24717

QTS, QuTS hero

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3492 build 20260507 and later QuTS hero h5.2.9.3499 build 20260514 and later QuTS hero h5.3.4.3500 build 20260520 and later QuTS hero h6.0.0.3459 build 20260409 and later

CVSS 4.0 · 1.2 Low EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems

Products

Qts Quts Hero Qts and 1 more

CVE-2026-24716

QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3492 build 20260507 and later QuTS hero h5.2.9.3499 build 20260514 and later QuTS hero h5.3.4.3500 build 20260520 and later QuTS hero h6.0.0.3459 build 20260409 and later

CVSS 4.0 · 1.2 Low EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems Inc.

Products

Qts Quts Hero Qts and 1 more

CVE-2026-24719

QTS, QuTS hero

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3492 build 20260507 and later QuTS hero h5.2.9.3499 build 20260514 and later

CVSS 4.0 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems

Products

Qts Quts Hero Qts and 1 more

CVE-2026-22897

QuNetSwitch

A command injection vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuNetSwitch 2.0.4.0415 and later

CVSS 4.0 · 8.1 High EPSS 1.1% KEV · Not listed

Vendors

Qnap Qnap Systems

Products

Qunetswitch Qunetswitch

CVE-2026-26237

QuMagie

A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions. We have already fixed the vulnerability in the following version: QuMagie 2.9.0 and later

CVSS 4.0 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems

Products

Qumagie Qumagie

CVE-2026-26236

QuMagie

A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions. We have already fixed the vulnerability in the following version: QuMagie 2.9.0 and later

CVSS 4.0 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems

Products

Qumagie Qumagie

CVE-2025-62851

License Center

A path traversal vulnerability has been reported to affect License Center. If a local attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: License Center 1.9.56 and later

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems

Products

License Center License Center

CVE-2026-24720

File Station 5

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later

CVSS 4.0 · 1.3 Low EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems

Products

File Station File Station 5

CVE-2026-22899

File Station 5

A NULL pointer dereference vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5208 and later

CVSS 4.0 · 1.3 Low EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems

Products

File Station File Station 5

CVE-2026-24724

File Station 5

An incorrect authorization vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass intended access restrictions. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later

CVSS 4.0 · 6.2 Medium EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems

Products

File Station File Station 5

CVE-2026-26241

File Station 5

A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later

CVSS 4.0 · 1.3 Low EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems

Products

File Station File Station 5

CVE-2026-26239

File Station 5

A buffer overflow vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5208 and later

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems

Products

File Station File Station 5

CVE-2026-26240

File Station 5

A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later

CVSS 4.0 · 1.3 Low EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems

Products

File Station File Station 5

CVE-2026-22893

QTS, QuTS hero

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3410 build 20260214 and later QuTS hero h5.2.9.3410 build 20260214 and later QuTS hero h5.3.4.3500 build 20260520 and later QuTS hero h6.0.0.3459 build 20260409 and later

CVSS 4.0 · 8.6 High EPSS 1.1% KEV · Not listed

Vendors

Qnap Qnap Systems Inc.

Products

Qts Quts Hero Qts and 1 more

CVE-2025-66281

QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3410 build 20260214 and later QuTS hero h5.2.9.3410 build 20260214 and later QuTS hero h5.3.4.3500 build 20260520 and later QuTS hero h6.0.0.3397 build 20260206 and later

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems Inc.

Products

Qts Quts Hero Qts and 1 more

CVE-2025-66279

QTS, QuTS hero

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3410 build 20260214 and later QuTS hero h5.2.9.3410 build 20260214 and later QuTS hero h5.3.4.3500 build 20260520 and later QuTS hero h6.0.0.3397 build 20260206 and later

CVSS 4.0 · 8.6 High EPSS 1.1% KEV · Not listed

Vendors

Qnap Qnap Systems Inc.

Products

Qts Quts Hero Qts and 1 more

CVE-2025-66273

QTS, QuTS hero

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3410 build 20260214 and later QuTS hero h5.2.9.3410 build 20260214 and later QuTS hero h5.3.4.3500 build 20260520 and later QuTS hero h6.0.0.3397 build 20260206 and later

CVSS 4.0 · 8.6 High EPSS 1.1% KEV · Not listed

Vendors

Qnap Qnap Systems

Products

Qts Quts Hero Qts and 1 more