QT
Product
QTS
On CISA KEVExploited in the wildRansomware-linked
140
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 47Medium 84Low 1
Watch
Add QTS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-2509 In wildKEV | 9.8 | Apr 17 | Command Injection Vulnerability in QTS and QuTS hero Affected: before 4.5.2.1566 Build 20210202; before 4.5.1.1495 Build 20201123; before 4.3.6.1620 Build 20210322; before 4.3.4.1632 Build 20210324; before 4.3.3.1624 Build 20210416; before 4.2.6 Build 20210327 |
| CVE-2018-19949 RansomwareIn wildKEV | 9.8 | Oct 28 | QNAP NAS File Station Command Injection Vulnerability Affected: before 4.4.2.1231; before 4.4.1.1201; before 4.3.6.1218; before 4.3.4.1190; before 4.3.3.1161; before 4.2.6 |
| CVE-2018-19953 RansomwareIn wildKEV | 6.1 | Oct 28 | QNAP NAS File Station Cross-Site Scripting Vulnerability Affected: before 4.4.2.1231; before 4.4.1.1201; before 4.3.6.1218; before 4.3.4.1190; before 4.3.3.1161; before 4.2.6 |
| CVE-2018-19943 RansomwareIn wildKEV | 5.4 | Oct 28 | QNAP NAS File Station Cross-Site Scripting Vulnerability Affected: before 4.4.2.1270; before 4.4.1.1261; before 4.3.6.1263; before 4.3.4.1282; before 4.3.3.1252; before 4.2.6 |
| CVE-2025-66276 | 9.8 | Jun 10 | QuTS hero is not affected Affected: 5.2.0 before 5.2.7.3256 build 20250913 |
| CVE-2025-66277 | 9.8 | Feb 11 | QTS, QuTS hero Affected: 5.2.x before 5.2.8.3350 build 20251216 |
| CVE-2025-59385 | 9.8 | Dec 16 | QTS, QuTS hero Affected: 5.2.x before 5.2.7.3297 build 20251024 |
| CVE-2025-62849 | 9.8 | Dec 16 | QTS, QuTS hero Affected: 5.2.x before 5.2.7.3297 build 20251024 |
| CVE-2024-50393 | 9.8 | Dec 6 | QTS, QuTS hero Affected: 5.1.x before 5.1.9.2954 build 20241120; 5.2.x before 5.2.2.2950 build 20241114 |
| CVE-2024-48859 | 9.1 | Dec 6 | QTS, QuTS hero Affected: 5.1.x before 5.1.9.2954 build 20241120; 5.2.x before 5.2.2.2950 build 20241114 |
| CVE-2025-30264 | 8.8 | Aug 29 | QTS, QuTS hero Affected: 5.2.x before 5.2.5.3145 build 20250526 |
| CVE-2025-22481 | 8.8 | Jun 6 | QTS, QuTS hero Affected: 5.2.x before 5.2.4.3079 build 20250321 |
| CVE-2024-53691 | 8.8 | Dec 6 | QTS, QuTS hero Affected: 5.1.x before 5.1.8.2823 build 20240712; 5.2.x before 5.2.0.2802 build 20240620 |
| CVE-2024-50396 | 8.8 | Nov 22 | QTS, QuTS hero Affected: ? before 5.2.1.2930 build 20241025 |
| CVE-2024-50397 | 8.8 | Nov 22 | QTS, QuTS hero Affected: 5.2.x before 5.2.1.2930 build 20241025 |
| CVE-2024-32763 | 8.8 | Sep 6 | QTS, QuTS hero Affected: 5.1.x before 5.1.8.2823 build 20240712 |
| CVE-2023-34974 | 8.8 | Sep 6 | QTS, QuTS hero, QuTScloud, QVR, QES Affected: 4.5.x before 4.5.4.2790 build 20240605 |
| CVE-2024-21898 | 8.8 | Sep 6 | QTS, QuTS hero Affected: 5.1.x before 5.1.6.2722 build 20240402 |
| CVE-2023-51367 | 8.8 | Sep 6 | QTS, QuTS hero Affected: 5.1.x before 5.1.6.2722 build 20240402 |
| CVE-2025-52872 | 8.1 | Jan 2 | QTS, QuTS hero Affected: 5.2.x before 5.2.7.3256 build 20250913 |
| CVE-2025-52864 | 8.1 | Jan 2 | QTS, QuTS hero Affected: 5.2.x before 5.2.7.3256 build 20250913 |
| CVE-2025-52863 | 8.1 | Jan 2 | QTS, QuTS hero Affected: 5.2.x before 5.2.7.3256 build 20250913 |
| CVE-2025-30273 | 8.1 | Aug 29 | QTS, QuTS hero Affected: 5.2.x before 5.2.5.3145 build 20250526 |
| CVE-2024-14026 | 7.8 | Mar 11 | QTS, QuTS hero Affected: 5.1.x before 5.1.9.2954 build 20241120; 5.2.x before 5.2.3.3006 build 20250108 |
| CVE-2024-38641 | 7.8 | Sep 6 | QTS, QuTS hero Affected: 5.1.x before 5.1.8.2823 build 20240712 |
| CVE-2023-39298 | 7.8 | Sep 6 | QTS, QuTS hero Affected: 5.1.x before 5.2.0.2737 build 20240417 |
| CVE-2025-9110 | 7.5 | Jan 2 | QTS, QuTS hero Affected: 5.2.x before 5.2.8.3332 build 20251128 |
| CVE-2025-62847 | 7.5 | Dec 16 | QTS, QuTS hero Affected: 5.2.x before 5.2.7.3297 build 20251024 |
| CVE-2025-62848 | 7.5 | Dec 16 | QTS, QuTS hero Affected: 5.2.x before 5.2.7.3297 build 20251024 |
| CVE-2024-13086 | 7.5 | Mar 7 | QTS, QuTS hero Affected: 5.x before QTS 5.2.0.2851 build 20240808 |
| CVE-2022-27600 | 7.5 | Dec 19 | QTS, QuTS hero, QuTScloud Affected: 5.0.x before 5.0.1.2277; 4.5.x before 4.5.4.2280 build 20230112 |
| CVE-2024-48868 | 7.5 | Dec 6 | QTS, QuTS hero Affected: 5.1.x before 5.1.9.2954 build 20241120; 5.2.x before 5.2.2.2950 build 20241114 |
| CVE-2024-48867 | 7.5 | Dec 6 | QTS, QuTS hero Affected: 5.1.x before 5.1.9.2954 build 20241120; 5.2.x before 5.2.2.2950 build 20241114 |
| CVE-2024-48865 | 7.5 | Dec 6 | QTS, QuTS hero Affected: 5.1.x before 5.1.9.2954 build 20241120; 5.2.x before 5.2.2.2950 build 20241114 |
| CVE-2026-24719 | 7.2 | Jun 10 | QTS, QuTS hero Affected: 5.2.0 before 5.2.9.3492 build 20260507 |
| CVE-2026-24716 | 7.2 | Jun 10 | QTS, QuTS hero Affected: 5.2.0 before 5.2.9.3492 build 20260507 |
| CVE-2026-22893 | 7.2 | Jun 10 | QTS, QuTS hero Affected: 5.2.0 before 5.2.9.3410 build 20260214 |
| CVE-2025-66281 | 7.2 | Jun 10 | QTS, QuTS hero Affected: 5.2.0 before 5.2.9.3410 build 20260214 |
| CVE-2025-66280 | 7.2 | Jun 10 | QTS, QuTS hero Affected: 5.2.0 before 5.2.9.3410 build 20260214 |
| CVE-2025-66279 | 7.2 | Jun 10 | QTS, QuTS hero Affected: 5.2.0 before 5.2.9.3410 build 20260214 |
| CVE-2025-66273 | 7.2 | Jun 10 | QTS, QuTS hero Affected: 5.2.0 before 5.2.9.3410 build 20260214 |
| CVE-2025-62850 | 7.2 | Jun 10 | NULL Pointer Dereference in networkRequest.cgi Affected: 5.2.x before 5.2.9.3410 build 20260214 |
| CVE-2025-47212 | 7.2 | Oct 3 | QTS, QuTS hero Affected: 5.2.x before 5.2.6.3195 build 20250715 |
| CVE-2024-53699 | 7.2 | Mar 7 | QTS, QuTS hero Affected: 5.2.x before 5.2.3.3006 build 20250108 |
| CVE-2024-53697 | 7.2 | Mar 7 | QTS, QuTS hero Affected: 5.2.x before 5.2.3.3006 build 20250108 |
| CVE-2024-38638 | 7.2 | Mar 7 | QTS, QuTS hero Affected: 5.1.x before 5.1.9.2954 build 20241120 |
| CVE-2024-50403 | 7.2 | Dec 6 | QTS, QuTS hero Affected: 5.2.x before 5.2.2.2950 build 20241114 |
| CVE-2024-50402 | 7.2 | Dec 6 | QTS, QuTS hero Affected: 5.1.x before 5.1.9.2954 build 20241120; 5.2.x before 5.2.2.2950 build 20241114 |
| CVE-2024-37041 | 7.2 | Nov 22 | QTS, QuTS hero Affected: 5.2.x before 5.2.1.2930 build 20241025 |
| CVE-2024-37044 | 7.2 | Nov 22 | QTS, QuTS hero Affected: 5.2.x before 5.2.1.2930 build 20241025 |