QS
Vendor
QNAP Systems Inc.
525
CVEs
9
On KEV
39
New 30D
Products
QC8.8
Qsync Central
QNAP Systems Inc.
67 CVEs0 on KEV6 new
VS8.8
Video Station
QNAP Systems Inc.
11 CVEs0 on KEV6 new
NS9.8
Notes Station 3
QNAP Systems Inc.
10 CVEs0 on KEV4 new
FS9.1
File Station 5
QNAP Systems Inc.
58 CVEs0 on KEV3 new
QU9.8
QuRouter
QNAP Systems Inc.
15 CVEs0 on KEV3 new
QU9.8
QuMagie
QNAP Systems Inc.
9 CVEs0 on KEV2 new
H39.8
HBS 3 Hybrid Backup Sync
QNAP Systems Inc.
6 CVEs0 on KEV2 new
HS9.3
HybridDesk Station
QNAP Systems Inc.
3 CVEs0 on KEV2 new
DS8.7
Download Station
QNAP Systems Inc.
6 CVEs0 on KEV3 new
QS9.3
Qsirch
QNAP Systems Inc.
1 CVEs0 on KEV1 new
SD9.3
sMedio DTCP MOVE
QNAP Systems Inc.
1 CVEs0 on KEV1 new
HB8.7
Hybrid Backup Sync
QNAP Systems Inc.
2 CVEs0 on KEV2 new
QC8.7
QcalAgent
QNAP Systems Inc.
2 CVEs0 on KEV1 new
QS6.3
QuFTP Service
QNAP Systems Inc.
2 CVEs0 on KEV1 new
NV6.2
Network & Virtual Switch
QNAP Systems Inc.
1 CVEs0 on KEV1 new
VS8.7
Virtualization Station
QNAP Systems Inc.
1 CVEs0 on KEV1 new
QT9.8
QTS
QNAP Systems Inc.
140 CVEs4 on KEV0 new
QH9.8
QuTS hero
QNAP Systems Inc.
130 CVEs1 on KEV0 new
PS9.8
Photo Station
QNAP Systems Inc.
7 CVEs1 on KEV0 new
HE9.8
Helpdesk
QNAP Systems Inc.
3 CVEs1 on KEV0 new
H39.8
HBS 3
QNAP Systems Inc.
1 CVEs1 on KEV0 new
VN8.8
VioStor NVR
QNAP Systems Inc.
1 CVEs1 on KEV0 new
QC9.8
QuLog Center
QNAP Systems Inc.
7 CVEs0 on KEV0 new
LC9.8
License Center
QNAP Systems Inc.
6 CVEs0 on KEV0 new
MS9.1
Media Streaming add-on
QNAP Systems Inc.
4 CVEs0 on KEV0 new
QU9.8
QuNetSwitch
QNAP Systems Inc.
4 CVEs0 on KEV0 new
HD9.8
Hyper Data Protector
QNAP Systems Inc.
2 CVEs0 on KEV0 new
NC8.8
Notification Center
QNAP Systems Inc.
2 CVEs0 on KEV0 new
QP8.6
Qfinder Pro Mac
QNAP Systems Inc.
2 CVEs0 on KEV0 new
QF8.6
Qsync for Mac
QNAP Systems Inc.
2 CVEs0 on KEV0 new
QD8.6
QVPN Device Client for Mac
QNAP Systems Inc.
2 CVEs0 on KEV0 new
VI9.8
VioStor
QNAP Systems Inc.
2 CVEs0 on KEV0 new
MR9.8
Malware Remover
QNAP Systems Inc.
1 CVEs0 on KEV0 new
MM8.1
MARS (Multi-Application Recovery Service)
QNAP Systems Inc.
1 CVEs0 on KEV0 new
MS8.8
Music Station
QNAP Systems Inc.
1 CVEs0 on KEV0 new
NR7.8
NetBak Replicator
QNAP Systems Inc.
1 CVEs0 on KEV0 new
QF7.5
Qfiling
QNAP Systems Inc.
1 CVEs0 on KEV0 new
QA7.5
QNAP AI Core
QNAP Systems Inc.
1 CVEs0 on KEV0 new
QA6.8
QNAP Authenticator
QNAP Systems Inc.
1 CVEs0 on KEV0 new
QU7.2
QuFirewall
QNAP Systems Inc.
1 CVEs0 on KEV0 new
QC7.2
QuTS cloud
QNAP Systems Inc.
1 CVEs0 on KEV0 new
QU7.5
QuTScloud
QNAP Systems Inc.
1 CVEs0 on KEV0 new
QV7.2
QVP
QNAP Systems Inc.
1 CVEs0 on KEV0 new
QW7.8
QVPN Windows
QNAP Systems Inc.
1 CVEs0 on KEV0 new
QP9.8
QVR Pro
QNAP Systems Inc.
1 CVEs0 on KEV0 new
QS6.7
QVR Smart Client
QNAP Systems Inc.
1 CVEs0 on KEV0 new
SS9.8
SMB Service
QNAP Systems Inc.
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-62841 New | HB Hybrid Backup Sync QNAP Systems Inc. | 8.7 | Oct 29 | Hard-coded Cryptographic Key #2 |
| CVE-2025-62839 New | HB Hybrid Backup Sync QNAP Systems Inc. | 8.7 | Oct 29 | Hard-coded Cryptographic Key #1 |
| CVE-2026-50619 | QS Qsirch QNAP Systems Inc. | 9.3 | Oct 15 | Unauthenticated remote code execution vulnerability |
| CVE-2026-47790 | QS QuFTP Service QNAP Systems Inc. | 6.3 | Oct 15 | Privilege Escalation via QuFTP Log-based XSS |
| CVE-2026-47786 | HS HybridDesk Station QNAP Systems Inc. | 9.3 | Oct 15 | Pre-Authentication Command Injection |
| CVE-2026-39997 | HS HybridDesk Station QNAP Systems Inc. | 8.9 | Oct 15 | Unauthenticated Remote Input Injection in QNAP HD Station's remotepad |
| CVE-2026-39991 | NS Notes Station 3 QNAP Systems Inc. | 4.8 | Oct 15 | Stored Cross-Site Scripting (XSS) in Note Station file upload functionality |
| CVE-2026-34009 | NS Notes Station 3 QNAP Systems Inc. | 8.4 | Oct 15 | **Container Escape** Host user home directory mounted with write access into application container |
| CVE-2026-34008 | NS Notes Station 3 QNAP Systems Inc. | 8.5 | Oct 15 | **Privilege Escalation** World-writable crontab path monitored and executed by root-owned process |
| CVE-2026-34007 | NS Notes Station 3 QNAP Systems Inc. | 6.9 | Oct 15 | **RCE** Unsanitized `X-Forwarded-For` header passed to `shell_exec()` via broken IP validation fallback in `getClientIP()` |
| CVE-2026-53882 | VS Virtualization Station QNAP Systems Inc. | 8.7 | Oct 15 | Path Traversal in Virtualization Station VM Import |
| CVE-2026-50612 | QU QuMagie QNAP Systems Inc. | 9.4 | Oct 15 | Import Symlink Following Remote Code Execution Vulnerability in QuMagie |
| CVE-2026-44084 | VS Video Station QNAP Systems Inc. | 7.5 | Oct 15 | Access Code Forgery in Video Station leading to unauthorized media access |
| CVE-2026-41545 | QU QuMagie QNAP Systems Inc. | 8.6 | Oct 15 | WebSocket timelapse path traversal and command injection |
| CVE-2026-41541 | QC Qsync Central QNAP Systems Inc. | 5.3 | Oct 15 | Symlink creation in qsyncsrv.cgi |
| CVE-2026-39989 | DS Download Station QNAP Systems Inc. | 5.3 | Oct 15 | SSRF in QNAP Download Station |
| CVE-2026-34015 | VS Video Station QNAP Systems Inc. | 6.5 | Oct 15 | Remote Code Execution in upload.php of Video Station |
| CVE-2026-34014 | DS Download Station QNAP Systems Inc. | 8.4 | Oct 15 | ds-move-files.sh is writable and executed as root |
| CVE-2026-34006 | SD sMedio DTCP MOVE QNAP Systems Inc. | 9.3 | Oct 15 | Pre-Authentication Multiple Critical Vulnerabilities in QNAP sMedioDTCPServer |
| CVE-2026-26245 | VS Video Station QNAP Systems Inc. | 8.8 | Oct 15 | SQLi#2 SQL Injection in class_videos.php getSmartVideosByOffset |
| CVE-2026-26244 | VS Video Station QNAP Systems Inc. | 8.8 | Oct 15 | SQLi#1 SQL Injection in class_videos.php _getFilters |
| CVE-2026-26243 | QC Qsync Central QNAP Systems Inc. | 7.2 | Oct 15 | Arbitrary Folder Deletion in Qsync Central 5.0.0.5 |
| CVE-2026-41544 | QC QcalAgent QNAP Systems Inc. | 8.7 | Oct 15 | Path Traversal leading to Arbitrary File Move, Docker Escape, and Host RCE in /calapi/renameUpload endpoint |
| CVE-2026-39993 | DS Download Station QNAP Systems Inc. | 8.7 | Oct 15 | Path Traversal to Root RCE in QNAP Download Station via Addon/Search addon Parameter |
| CVE-2026-24723 | FS File Station 5 QNAP Systems Inc. | 6.5 | Oct 15 | NULL Pointer Dereference in utilRequest.cgi |
| CVE-2026-24722 | FS File Station 5 QNAP Systems Inc. | 6.5 | Oct 15 | Null Pointer Dereference in File Station 5 |
| CVE-2026-24721 | FS File Station 5 QNAP Systems Inc. | 6.5 | Oct 15 | Null Pointer Dereference in File Station 5 |
| CVE-2026-24718 | QC Qsync Central QNAP Systems Inc. | 5.3 | Oct 15 | Path Traversal Vulnerability in Qsync Central's qsyncsrv.cgi |
| CVE-2026-24715 | QU QuRouter QNAP Systems Inc. | 5.3 | Oct 15 | Lack of Reproducible Vulnerability Evidence in QNAP Report |
| CVE-2026-22896 | NV Network & Virtual Switch QNAP Systems Inc. | 6.2 | Oct 15 | Stored XSS via Interface Name in Network & Virtual Switch App |
| CVE-2025-68404 | QU QuRouter QNAP Systems Inc. | 7.5 | Oct 15 | vcs_pentest Race Condition Authentication Bypass Vulnerability in QuRouter management interface |
| CVE-2025-68403 | QU QuRouter QNAP Systems Inc. | 4.6 | Oct 15 | Inadequate Steps to Confirm Vulnerability in QuRouter |
| CVE-2025-66275 | VS Video Station QNAP Systems Inc. | 6.5 | Oct 15 | Remote code execution via command injection |
| CVE-2025-66272 | VS Video Station QNAP Systems Inc. | 6.5 | Oct 15 | Arbitrary file deletion and remote code execution |
| CVE-2025-29897 | QC Qsync Central QNAP Systems Inc. | 2.3 | Oct 15 | Stack-based Buffer Overflow in qsyncsrv.cgi |
| CVE-2025-29896 | QC Qsync Central QNAP Systems Inc. | 2.3 | Oct 15 | NULL Pointer Dereference in qsyncsrv.cgi |
| CVE-2025-29895 | QC Qsync Central QNAP Systems Inc. | 2.3 | Oct 15 | NULL Pointer Dereference in qsyncsrv.cgi |
| CVE-2024-27123 | QC QcalAgent QNAP Systems Inc. | 5.2 | Sep 18 | A cross-site scripting (XSS) vulnerability has been reported to affect QcalAgent |
| CVE-2026-26240 | FS File Station 5 QNAP Systems Inc. | 9.1 | Jun 10 | File Station 5 |
| CVE-2026-26241 | FS File Station 5 QNAP Systems Inc. | 9.1 | Jun 10 | File Station 5 |
| CVE-2026-24724 | FS File Station 5 QNAP Systems Inc. | 8.1 | Jun 10 | File Station 5 |
| CVE-2026-26239 | FS File Station 5 QNAP Systems Inc. | 8.1 | Jun 10 | File Station 5 |
| CVE-2026-26237 | QU QuMagie QNAP Systems Inc. | 7.5 | Jun 10 | A missing authorization vulnerability has been reported to affect QuMagie |
| CVE-2026-24719 | QH QuTS hero QNAP Systems Inc. | 7.2 | Jun 10 | QTS, QuTS hero |
| CVE-2026-24717 | QT QTS QNAP Systems Inc. | 6.5 | Jun 10 | QTS, QuTS hero |
| CVE-2026-24716 | QH QuTS hero QNAP Systems Inc. | 7.2 | Jun 10 | QTS, QuTS hero |
| CVE-2026-24720 | FS File Station 5 QNAP Systems Inc. | 6.5 | Jun 10 | File Station 5 |
| CVE-2026-22899 | FS File Station 5 QNAP Systems Inc. | 6.5 | Jun 10 | File Station 5 |
| CVE-2026-22893 | QT QTS QNAP Systems Inc. | 7.2 | Jun 10 | QTS, QuTS hero |
| CVE-2025-66281 | QT QTS QNAP Systems Inc. | 7.2 | Jun 10 | QTS, QuTS hero |
| CVE-2025-66280 | QH QuTS hero QNAP Systems Inc. | 7.2 | Jun 10 | QTS, QuTS hero |
| CVE-2025-66279 | QT QTS QNAP Systems Inc. | 7.2 | Jun 10 | QTS, QuTS hero |
| CVE-2025-66273 | QT QTS QNAP Systems Inc. | 7.2 | Jun 10 | QTS, QuTS hero |
| CVE-2025-62851 | LC License Center QNAP Systems Inc. | 4.4 | Jun 10 | License Center |
| CVE-2025-62850 | QH QuTS hero QNAP Systems Inc. | 7.2 | Jun 10 | NULL Pointer Dereference in networkRequest.cgi |
| CVE-2025-58468 | NC Notification Center QNAP Systems Inc. | 8.8 | Jun 10 | Notification Center |
| CVE-2025-66276 | QT QTS QNAP Systems Inc. | 9.8 | Jun 10 | QuTS hero is not affected |
| CVE-2026-44083 | QU QuMagie QNAP Systems Inc. | 9.8 | Jun 9 | An authorization bypass through user-controlled key vulnerability has been reported to affect QuMagie |
| CVE-2025-62858 | QT QTS QNAP Systems Inc. | 6.5 | Jun 9 | QTS, QuTS hero |
| CVE-2026-41539 | QT QTS QNAP Systems Inc. | 6.1 | Jun 9 | QTS, QuTS hero |