Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 31

Export CSV
CVE-2025-62848

QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3297 build 20251024 and later QuTS hero h5.2.7.3297 build 20251024 and later QuTS hero h5.3.1.3292 build 20251024 and later

CVSS 4.0 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems Inc.
Products
Qts Quts Hero Qts and 1 more
CVE-2025-62849

QTS, QuTS hero

An SQL injection vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3297 build 20251024 and later QuTS hero h5.2.7.3297 build 20251024 and later QuTS hero h5.3.1.3292 build 20251024 and later

CVSS 4.0 · 5.2 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems Inc.
Products
Qts Quts Hero Qts and 1 more
CVE-2026-41539

QTS, QuTS hero

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3492 build 20260507 and later QuTS hero h5.2.9.3499 build 20260514 and later QuTS hero h5.3.4.3500 build 20260520 and later QuTS hero h6.0.0.3500 build 20260520 and later

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems Inc.
Products
Qts Quts Hero Qts and 1 more
CVE-2026-24716

QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3492 build 20260507 and later QuTS hero h5.2.9.3499 build 20260514 and later QuTS hero h5.3.4.3500 build 20260520 and later QuTS hero h6.0.0.3459 build 20260409 and later

CVSS 4.0 · 1.2 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems Inc.
Products
Qts Quts Hero Qts and 1 more
CVE-2026-22893

QTS, QuTS hero

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3410 build 20260214 and later QuTS hero h5.2.9.3410 build 20260214 and later QuTS hero h5.3.4.3500 build 20260520 and later QuTS hero h6.0.0.3459 build 20260409 and later

CVSS 4.0 · 8.6 High EPSS 1.1% KEV · Not listed
Vendors
Qnap Qnap Systems Inc.
Products
Qts Quts Hero Qts and 1 more
CVE-2025-66281

QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3410 build 20260214 and later QuTS hero h5.2.9.3410 build 20260214 and later QuTS hero h5.3.4.3500 build 20260520 and later QuTS hero h6.0.0.3397 build 20260206 and later

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems Inc.
Products
Qts Quts Hero Qts and 1 more
CVE-2025-66279

QTS, QuTS hero

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3410 build 20260214 and later QuTS hero h5.2.9.3410 build 20260214 and later QuTS hero h5.3.4.3500 build 20260520 and later QuTS hero h6.0.0.3397 build 20260206 and later

CVSS 4.0 · 8.6 High EPSS 1.1% KEV · Not listed
Vendors
Qnap Qnap Systems Inc.
Products
Qts Quts Hero Qts and 1 more
CVE-2025-62847

QTS, QuTS hero

An improper neutralization of argument delimiters in a command vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to alter execution logic. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3297 build 20251024 and later QuTS hero h5.2.7.3297 build 20251024 and later QuTS hero h5.3.1.3292 build 20251024 and later

CVSS 4.0 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems Inc.
Products
Qts Quts Hero Qts and 1 more
CVE-2025-59385

QTS, QuTS hero

An authentication bypass by spoofing vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to access resources which are not otherwise accessible without proper authentication. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3297 build 20251024 and later QuTS hero h5.2.7.3297 build 20251024 and later QuTS hero h5.3.1.3292 build 20251024 and later

CVSS 4.0 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems Inc.
Products
Qts Quts Hero Qts and 1 more
CVE-2025-59380

QTS, QuTS hero

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following versions: QTS 5.2.8.3332 build 20251128 and later QuTS hero h5.2.8.3321 build 20251117 and later

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems Inc.
Products
Qts Quts Hero Qts and 1 more
CVE-2025-9110

QTS, QuTS hero

An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following versions: QTS 5.2.8.3332 build 20251128 and later QuTS hero h5.2.8.3321 build 20251117 and later QuTS hero h5.3.1.3250 build 20250912 and later

CVSS 4.0 · 2.7 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems Inc.
Products
Qts Quts Hero Qts and 1 more
CVE-2025-53589

QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.1.3250 build 20250912 and later

CVSS 4.0 · 1.2 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems Inc.
Products
Qts Quts Hero Qts and 1 more
CVE-2025-53591

QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.1.3250 build 20250912 and later

CVSS 4.0 · 1.2 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems Inc.
Products
Qts Quts Hero Qts and 1 more
CVE-2025-53592

QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.1.3250 build 20250912 and later

CVSS 4.0 · 1.3 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems Inc.
Products
Qts Quts Hero Qts and 1 more
CVE-2025-53593

QTS, QuTS hero

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.1.3250 build 20250912 and later

CVSS 4.0 · 1.2 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems Inc.
Products
Qts Quts Hero Qts and 1 more
CVE-2025-53596

QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.1.3250 build 20250912 and later

CVSS 4.0 · 1.2 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems Inc.
Products
Qts Quts Hero Qts and 1 more
CVE-2025-44013

QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.6.3195 build 20250715 and later QuTS hero h5.2.6.3195 build 20250715 and later

CVSS 4.0 · 1.3 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems Inc.
Products
Qts Quts Hero Qts and 1 more
CVE-2025-52426

QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.1.3250 build 20250912 and later

CVSS 4.0 · 1.2 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems Inc.
Products
Qts Quts Hero Qts and 1 more
CVE-2025-52430

QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.1.3250 build 20250912 and later

CVSS 4.0 · 1.2 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems Inc.
Products
Qts Quts Hero Qts and 1 more