QuTS hero vulnerabilities | LiveThreat CVE Feed

Product

QuTS hero

by QNAP Systems Inc. · last CVE Jun 10, 2026

On CISA KEVExploited in the wild

131

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities131 In the news3 Timeline

Severity mix

Critical 6High 46Medium 78Low 1

Severity

All severities131 Critical6 High46 Medium78 Low1

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add QuTS hero to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-2509 In wildKEV	9.8	34%	Apr 17	Command Injection Vulnerability in QTS and QuTS hero Affected: before h4.5.1.1491 build 20201119
CVE-2025-66277	9.8	1%	Feb 11	QTS, QuTS hero Affected: h5.3.x before h5.3.2.3354 build 20251225; h5.2.x before h5.2.8.3350 build 20251216
CVE-2025-59385	9.8	1%	Dec 16	QTS, QuTS hero Affected: h5.2.x before h5.2.7.3297 build 20251024; h5.3.x before h5.3.1.3292 build 20251024
CVE-2025-62849	9.8	1%	Dec 16	QTS, QuTS hero Affected: h5.2.x before h5.2.7.3297 build 20251024; h5.3.x before h5.3.1.3292 build 20251024
CVE-2024-50393	9.8	1%	Dec 6	QTS, QuTS hero Affected: h5.1.x before h5.1.9.2954 build 20241120; h5.2.x before h5.2.2.2952 build 20241116
CVE-2024-48859	9.1	1%	Dec 6	QTS, QuTS hero Affected: h5.1.x before h5.1.9.2954 build 20241120; h5.2.x before h5.2.2.2952 build 20241116
CVE-2025-30264	8.8	2%	Aug 29	QTS, QuTS hero Affected: h5.2.x before h5.2.5.3138 build 20250519
CVE-2025-22481	8.8	1%	Jun 6	QTS, QuTS hero Affected: h5.2.x before h5.2.4.3079 build 20250321
CVE-2024-53691	8.8	24%	Dec 6	QTS, QuTS hero Affected: h5.1.x before h5.1.8.2823 build 20240712; h5.2.x before h5.2.0.2802 build 20240620
CVE-2024-50396	8.8	1%	Nov 22	QTS, QuTS hero Affected: h5.2.x before h5.2.1.2929 build 20241025
CVE-2024-50397	8.8	1%	Nov 22	QTS, QuTS hero Affected: h5.2.x before h5.2.1.2929 build 20241025
CVE-2024-32763	8.8	1%	Sep 6	QTS, QuTS hero Affected: h5.1.x before h5.1.8.2823 build 20240712
CVE-2023-34974	8.8	1%	Sep 6	QTS, QuTS hero, QuTScloud, QVR, QES Affected: h4.5.x before h4.5.4.2626 build 20231225
CVE-2024-21898	8.8	1%	Sep 6	QTS, QuTS hero Affected: h5.1.x before h5.1.6.2734 build 20240414
CVE-2025-48725	8.1	0%	Feb 11	A buffer overflow vulnerability has been reported to affect several QNAP operating system versions Affected: h5.3.x before h5.3.2.3354 build 20251225
CVE-2025-52872	8.1	0%	Jan 2	QTS, QuTS hero Affected: h5.2.x before h5.2.7.3256 build 20250913; h5.3.x before h5.3.0.3192 build 20250716
CVE-2025-52864	8.1	0%	Jan 2	QTS, QuTS hero Affected: h5.2.x before h5.2.7.3256 build 20250913; h5.3.x before h5.3.0.3192 build 20250716
CVE-2025-52863	8.1	0%	Jan 2	QTS, QuTS hero Affected: h5.2.x before h5.2.7.3256 build 20250913; h5.3.x before h5.3.0.3192 build 20250716
CVE-2025-30273	8.1	0%	Aug 29	QTS, QuTS hero Affected: h5.2.x before h5.2.5.3138 build 20250519
CVE-2024-14026	7.8	1%	Mar 11	QTS, QuTS hero Affected: h5.1.x before h5.1.9.2954 build 20241120; h5.2.x before h5.2.3.3006 build 20250108
CVE-2024-38641	7.8	1%	Sep 6	QTS, QuTS hero Affected: h5.1.x before h5.1.8.2823 build 20240712
CVE-2023-39298	7.8	0%	Sep 6	QTS, QuTS hero Affected: h5.1.x before h5.2.0.2782 build 20240601
CVE-2025-9110	7.5	0%	Jan 2	QTS, QuTS hero Affected: h5.2.x before h5.2.8.3321 build 20251117; h5.3.x before h5.3.1.3250 build 20250912
CVE-2025-62847	7.5	1%	Dec 16	QTS, QuTS hero Affected: h5.2.x before h5.2.7.3297 build 20251024; h5.3.x before h5.3.1.3292 build 20251024
CVE-2025-62848	7.5	1%	Dec 16	QTS, QuTS hero Affected: h5.2.x before h5.2.7.3297 build 20251024; h5.3.x before h5.3.1.3292 build 20251024
CVE-2024-13086	7.5	0%	Mar 7	QTS, QuTS hero Affected: h5.x before QuTS hero h5.2.0.2851 build 20240808
CVE-2022-27600	7.5	1%	Dec 19	QTS, QuTS hero, QuTScloud Affected: h5.0.x before h5.0.1.2277 build 20230112; h4.5.x before h4.5.4.2374 build 20230417
CVE-2024-48868	7.5	0%	Dec 6	QTS, QuTS hero Affected: h5.1.x before h5.1.9.2954 build 20241120; h5.2.x before h5.2.2.2952 build 20241116
CVE-2024-48867	7.5	0%	Dec 6	QTS, QuTS hero Affected: h5.1.x before h5.1.9.2954 build 20241120; h5.2.x before h5.2.2.2952 build 20241116
CVE-2024-48865	7.5	0%	Dec 6	QTS, QuTS hero Affected: h5.1.x before h5.1.9.2954 build 20241120; h5.2.x before h5.2.2.2952 build 20241116
CVE-2026-24719	7.2	1%	Jun 10	QTS, QuTS hero Affected: h5.2.0 before h5.2.9.3499 build 20260514
CVE-2026-24716	7.2	0%	Jun 10	QTS, QuTS hero Affected: h5.2.0 before h5.2.9.3499 build 20260514; h5.3.0 before h5.3.4.3500 build 20260520; ? before h6.0.0.3459 build 20260409
CVE-2026-22893	7.2	1%	Jun 10	QTS, QuTS hero Affected: h5.2.0 before h5.2.9.3410 build 20260214; h5.3.0 before h5.3.4.3500 build 20260520; ? before h6.0.0.3459 build 20260409
CVE-2025-66281	7.2	0%	Jun 10	QTS, QuTS hero Affected: h5.2.0 before h5.2.9.3410 build 20260214; h5.3.0 before h5.3.4.3500 build 20260520; ? before h6.0.0.3397 build 20260206
CVE-2025-66280	7.2	0%	Jun 10	QTS, QuTS hero Affected: h5.2.0 before h5.2.9.3410 build 20260214; h5.3.0 before h5.3.4.3500 build 20260520; ? before h6.0.0.3397 build 20260206
CVE-2025-66279	7.2	1%	Jun 10	QTS, QuTS hero Affected: h5.2.0 before h5.2.9.3410 build 20260214; h5.3.0 before h5.3.4.3500 build 20260520; ? before h6.0.0.3397 build 20260206
CVE-2025-66273	7.2	1%	Jun 10	QTS, QuTS hero Affected: h5.2.0 before h5.2.9.3410 build 20260214; h5.3.0 before h5.3.4.3500 build 20260520; ? before h6.0.0.3397 build 20260206
CVE-2025-62850	7.2	0%	Jun 10	NULL Pointer Dereference in networkRequest.cgi Affected: h5.2.x before h5.2.9.3410 build 20260214; h5.3.x before h5.3.4.3500 build 20260520; h6.0.x before h6.0.0.3459 build 20260409
CVE-2025-47212	7.2	1%	Oct 3	QTS, QuTS hero Affected: h5.2.x before h5.2.6.3195 build 20250715
CVE-2024-53699	7.2	1%	Mar 7	QTS, QuTS hero Affected: h5.2.x before h5.2.3.3006 build 20250108
CVE-2024-53697	7.2	1%	Mar 7	QTS, QuTS hero Affected: h5.2.x before h5.2.3.3006 build 20250108
CVE-2024-38638	7.2	1%	Mar 7	QTS, QuTS hero Affected: h5.1.x before h5.1.9.2954 build 20241120
CVE-2024-50403	7.2	0%	Dec 6	QTS, QuTS hero Affected: h5.2.x before h5.2.2.2952 build 20241116
CVE-2024-50402	7.2	1%	Dec 6	QTS, QuTS hero Affected: h5.1.x before h5.1.9.2954 build 20241120; h5.2.x before h5.2.2.2952 build 20241116
CVE-2024-37041	7.2	1%	Nov 22	QTS, QuTS hero Affected: h5.2.x before h5.2.1.2929 build 20241025
CVE-2024-37044	7.2	1%	Nov 22	QTS, QuTS hero Affected: h5.2.x before h5.2.1.2929 build 20241025
CVE-2024-50398	7.2	1%	Nov 22	QTS, QuTS hero Affected: h5.2.x before h5.2.1.2929 build 20241025
CVE-2024-50399	7.2	1%	Nov 22	QTS, QuTS hero Affected: h5.2.x before h5.2.1.2929 build 20241025
CVE-2024-50400	7.2	1%	Nov 22	QTS, QuTS hero Affected: h5.2.x before h5.2.1.2929 build 20241025
CVE-2024-50401	7.2	1%	Nov 22	QTS, QuTS hero Affected: h5.2.x before h5.2.1.2929 build 20241025