Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 107

Export CSV
CVE-2026-34014

ds-move-files.sh is writable and executed as root

An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Download Station 5.10.1.312 and later Download Station 5.11.2.321 and later

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Qnap Systems
Products
Download Station
CVE-2025-62839

Hard-coded Cryptographic Key #1

An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 26.4.0.521 and later Hybrid Backup Sync 26.4.0.521 and later Hybrid Backup Sync 26.4.1.563 and later

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems Qnap Systems Inc.
Products
Hybrid Backup Sync Hbs 3 Hybrid Backup Sync Hbs 3 Hybrid Backup Sync
CVE-2025-62841

Hard-coded Cryptographic Key #2

An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 26.4.0.521 and later Hybrid Backup Sync 26.4.0.521 and later Hybrid Backup Sync 26.4.1.563 and later

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems Qnap Systems Inc.
Products
Hybrid Backup Sync Hbs 3 Hybrid Backup Sync Hbs 3 Hybrid Backup Sync
CVE-2026-34006

Pre-Authentication Multiple Critical Vulnerabilities in QNAP sMedioDTCPServer

A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability in the following version: sMedio DTCP MOVE 1.4.5 and later

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Qnap Systems
Products
Smedio Dtcp Move
CVE-2026-53882

Path Traversal in Virtualization Station VM Import

An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Virtualization Station 4.1.1.130 and later

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Qnap Systems
Products
Virtualization Station
CVE-2026-47790

Privilege Escalation via QuFTP Log-based XSS

A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a remote attacker gains a user account, they can then exploit the vulnerability to inject malicious code. We have already fixed the vulnerability in the following version: QuFTP Service 1.4.6 and later QuFTP Service 1.5.5 and later QuFTP Service 1.6.5 and later

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap Systems
Products
Quftp Service
CVE-2026-50612

Import Symlink Following Remote Code Execution Vulnerability in QuMagie

An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: QuMagie 2.9.2 and later

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Qnap Systems Qnap Systems Inc.
Products
Qumagie Qumagie
CVE-2026-39989

SSRF in QNAP Download Station

A server-side request forgery (SSRF) vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following version: Download Station 5.10.1.312 and later Download Station 5.11.2.321 and later

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap Systems
Products
Download Station
CVE-2026-39991

Stored Cross-Site Scripting (XSS) in Note Station file upload functionality

A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If a remote attacker gains a user account, they can then exploit the vulnerability to inject malicious code. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.12 and later

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap Systems
Products
Notes Station
CVE-2026-39997

Unauthenticated Remote Input Injection in QNAP HD Station's remotepad

A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.22 and later

CVSS 4.0 · 8.9 High EPSS < 1% KEV · Not listed
Vendors
Qnap Systems
Products
Hybriddesk Station
CVE-2026-47786

Pre-Authentication Command Injection

An OS command injection vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.23 and later HybridDesk Station 4.3.4 and later

CVSS 4.0 · 9.3 Critical EPSS 1.1% KEV · Not listed
Vendors
Qnap Systems
Products
Hybriddesk Station
CVE-2025-29897

Stack-based Buffer Overflow in qsyncsrv.cgi

A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 and later

CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Systems
Products
Qsync Central
CVE-2026-41544

Path Traversal leading to Arbitrary File Move, Docker Escape, and Host RCE in /calapi/renameUpload endpoint

A path traversal vulnerability has been reported to affect QcalAgent. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: QcalAgent 1.1.10 and later

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Qnap Systems
Products
Qcalagent
CVE-2026-22896

Stored XSS via Interface Name in Network & Virtual Switch App

A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch. If a remote attacker gains an administrator account, they can then exploit the vulnerability to inject malicious code. We have already fixed the vulnerability in the following version: Network & Virtual Switch in QTS 5.1.8.2823 build 20240712 and later Network & Virtual Switch in QTS 5.2.1.2930 build 20241025 and later Network & Virtual Switch in QuTS cloud c5.2.4.3041 build 20250211 and later Network & Virtual Switch in QuTS hero h5.1.8.2823 build 20240712 and later Network & Virtual Switch in QuTS hero h5.2.1.2929 build 20241025 and later

CVSS 4.0 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap Systems
Products
Network & Virtual Switch
CVE-2026-41541

Symlink creation in qsyncsrv.cgi

An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.7 and later Qsync Central 5.1.0.3 and later Qsync Central 5.2.0.5 and later Qsync Central 5.3.0.2 and later

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap Systems
Products
Qsync Central
CVE-2026-41545

WebSocket timelapse path traversal and command injection

A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: QuMagie 2.9.1 and later

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Qnap Systems Qnap Systems Inc.
Products
Qumagie Qumagie
CVE-2026-24715

Lack of Reproducible Vulnerability Evidence in QNAP Report

An observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: QuRouter 2.7.2.113 and later

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap Systems
Products
Qurouter
CVE-2026-24721

Null Pointer Dereference in File Station 5

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems
Products
File Station File Station 5
CVE-2026-24718

Path Traversal Vulnerability in Qsync Central's qsyncsrv.cgi

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.7 and later Qsync Central 5.1.0.3 and later Qsync Central 5.2.0.5 and later Qsync Central 5.3.0.2 and later

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap Systems
Products
Qsync Central
CVE-2026-26243

Arbitrary Folder Deletion in Qsync Central 5.0.0.5

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.6 and later Qsync Central 5.1.0.2 and later Qsync Central 5.2.0.4 and later

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Qnap Systems
Products
Qsync Central