QuTS hero vulnerabilities | LiveThreat CVE Feed

Product

QuTS hero

by QNAP Systems Inc. · last CVE Jun 10, 2026

On CISA KEVExploited in the wild

228

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities228 In the news3 Timeline

Severity mix

Critical 15High 107Medium 103Low 3

Severity

All severities228 Critical15 High107 Medium103 Low3

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add QuTS hero to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-50359	6.7	0%	Feb 2	QTS, QuTS hero Affected: h5.1.x before h5.1.5.2647 build 20240118
CVE-2026-24717	6.5	0%	Jun 10	QTS, QuTS hero Affected: h5.2.0 before h5.2.9.3499 build 20260514; h5.3.0 before h5.3.4.3500 build 20260520; ? before h6.0.0.3459 build 20260409
CVE-2025-62858	6.5	0%	Jun 9	QTS, QuTS hero Affected: h5.2.0 before h5.2.9.3410 build 20260214; h5.3.0 before h5.3.4.3500 build 20260520; ? before h6.0.0.3397 build 20260206
CVE-2025-53593	6.5	0%	Jan 2	QTS, QuTS hero Affected: h5.2.x before h5.2.7.3256 build 20250913; h5.3.x before h5.3.1.3250 build 20250912
CVE-2025-53592	6.5	0%	Jan 2	QTS, QuTS hero Affected: h5.2.x before h5.2.7.3256 build 20250913; h5.3.x before h5.3.1.3250 build 20250912
CVE-2025-53591	6.5	0%	Jan 2	QTS, QuTS hero Affected: h5.3.x before h5.3.1.3250 build 20250912; h5.2.x before h5.2.7.3256 build 20250913
CVE-2025-47208	6.5	0%	Jan 2	QTS, QuTS hero Affected: h5.2.x before h5.2.6.3195 build 20250715
CVE-2025-44013	6.5	0%	Jan 2	QTS, QuTS hero Affected: h5.2.x before h5.2.6.3195 build 20250715
CVE-2025-53407	6.5	0%	Oct 3	QTS, QuTS hero Affected: h5.2.x before h5.2.6.3195 build 20250715
CVE-2025-53406	6.5	0%	Oct 3	QTS, QuTS hero Affected: h5.2.x before h5.2.6.3195 build 20250715
CVE-2025-52429	6.5	0%	Oct 3	QTS, QuTS hero Affected: h5.2.x before h5.2.6.3195 build 20250715
CVE-2025-48730	6.5	0%	Oct 3	QTS, QuTS hero Affected: h5.2.x before h5.2.6.3195 build 20250715
CVE-2025-30274	6.5	0%	Aug 29	QTS, QuTS hero Affected: h5.2.x before h5.2.5.3138 build 20250519
CVE-2025-30272	6.5	0%	Aug 29	QTS, QuTS hero Affected: h5.2.x before h5.2.5.3138 build 20250519
CVE-2025-30271	6.5	0%	Aug 29	QTS, QuTS hero Affected: h5.2.x before h5.2.5.3138 build 20250519
CVE-2025-30270	6.5	0%	Aug 29	QTS, QuTS hero Affected: h5.2.x before h5.2.5.3138 build 20250519
CVE-2025-30268	6.5	0%	Aug 29	QTS, QuTS hero Affected: h5.2.x before h5.2.5.3138 build 20250519
CVE-2025-30267	6.5	0%	Aug 29	QTS, QuTS hero Affected: h5.2.x before h5.2.5.3138 build 20250519
CVE-2025-30265	6.5	0%	Aug 29	QTS, QuTS hero Affected: h5.2.x before h5.2.5.3138 build 20250519
CVE-2025-29882	6.5	0%	Aug 29	QTS, QuTS hero Affected: h5.2.x before h5.2.5.3138 build 20250519
CVE-2024-37047	6.5	1%	Nov 22	QTS, QuTS hero Affected: h5.2.x before h5.2.1.2929 build 20241025
CVE-2024-37049	6.5	1%	Nov 22	QTS, QuTS hero Affected: h5.2.x before h5.2.1.2929 build 20241025
CVE-2024-37050	6.5	1%	Nov 22	QTS, QuTS hero Affected: h5.2.x before h5.2.1.2929 build 20241025
CVE-2024-21904	6.5	0%	Sep 6	QTS, QuTS hero Affected: h5.1.x before h5.1.7.2770 build 20240520
CVE-2023-51368	6.5	0%	Sep 6	QTS, QuTS hero Affected: h5.1.x before h5.1.6.2734 build 20240414
CVE-2024-21900	6.5	9%	Mar 8	QTS, QuTS hero, QuTScloud Affected: h5.1.x before h5.1.3.2578 build 20231110
CVE-2023-34972	6.5	0%	Aug 24	QTS, QuTS hero and QuTScloud Affected: h5.1.* before h5.1.0.2424 build 20230609
CVE-2026-41539	6.1	0%	Jun 9	QTS, QuTS hero Affected: h5.2.0 before h5.2.9.3499 build 20260514; h5.3.0 before h5.3.4.3500 build 20260520; ? before h6.0.0.3500 build 20260520
CVE-2023-23372	6.1	0%	Dec 8	QTS, QuTS hero Affected: h5.1.x before h5.1.0.2424 build 20230609; h5.0.x before h5.0.1.2515 build 20230907; h4.5.x before h4.5.4.2476 build 20230728
CVE-2021-44054	6.1	1%	May 5	Open redirect Affected: before h5.0.0.1949 build 20220215; before h4.5.4.1951 build 20220218
CVE-2021-44053	6.1	1%	May 5	Reflected XSS Affected: before h5.0.0.1986 build 20220324; before h4.5.4.1971 build 20220310
CVE-2021-38674	6.1	1%	Jan 7	Reflected XSS Vulnerability in TFTP Affected: before h4.5.4.1771 build 20210825
CVE-2018-19957	6.1	1%	Sep 10	Insufficient HTTP Security Headers in QTS, QuTS hero, and QuTScloud Affected: before h4.5.4.1771 build 20210825
CVE-2020-36194	6.1	1%	Jul 1	XSS Vulnerability in QTS and QuTS heroCommand Injection Vulnerabilities in QTS and QuTS hero Affected: before h4.5.2.1638 build 20210414
CVE-2018-19942	6.1	1%	Apr 16	Cross-site Scripting Vulnerability in File Station Affected: before h4.5.1.1472 build 20201031
CVE-2020-2498	6.1	1%	Dec 10	Cross-site scripting vulnerability in QTS and QuTS hero Affected: < h4.5.1.1472
CVE-2020-2497	6.1	1%	Dec 10	Cross-site scripting vulnerability in QTS and QuTS hero Affected: < h4.5.1.1472
CVE-2020-2496	6.1	1%	Dec 10	Cross-site scripting vulnerability in QTS and QuTS hero Affected: < h4.5.1.1472
CVE-2020-2495	6.1	1%	Dec 10	Cross-site scripting vulnerability in QTS and QuTS hero Affected: < h4.5.1.1472
CVE-2023-50358	5.8	14%	Feb 13	QTS, QuTS hero, QuTScloud Affected: h5.x before h5.1.5.2647 build 20240118; h4.x before h4.5.4.2626 build 20231225
CVE-2024-50405	5.5	0%	Mar 7	QTS, QuTS hero Affected: h5.2.x before h5.2.3.3006 build 20250108
CVE-2024-56805	5.4	0%	Jun 6	QTS, QuTS hero Affected: h5.2.x before h5.2.4.3079 build 20250321
CVE-2024-21897	5.4	0%	Sep 6	QTS, QuTS hero Affected: h5.1.x before h5.1.6.2734 build 20240414
CVE-2021-28806	5.4	1%	Jun 3	DOM-Based XSS Vulnerability in QTS and QuTS hero Affected: before h4.5.2.1638 Build 20210414
CVE-2024-48866	5.3	0%	Dec 6	QTS, QuTS hero Affected: h5.1.x before h5.1.9.2954 build 20241120; h5.2.x before h5.2.2.2952 build 20241116
CVE-2023-34973	5.3	0%	Aug 24	QTS, QuTS hero Affected: h5.1.* before h5.1.0.2424 build 20230609
CVE-2021-38693	5.3	1%	May 5	Path Traversal in thttpd Affected: before h5.0.0.1949 build 20220215; before h4.5.4.1951 build 20220218
CVE-2025-47205	4.9	0%	Feb 11	QTS, QuTS hero Affected: h5.2.x before h5.2.8.3321 build 20251117
CVE-2025-58466	4.9	1%	Feb 11	QTS, QuTS hero Affected: h5.2.x before h5.2.8.3321 build 20251117
CVE-2025-59386	4.9	0%	Feb 11	A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions Affected: h5.3.x before h5.3.2.3354 build 20251225