qnap Vulnerability Advisory Catalog

Total 633 security vulnerabilities recorded for qnap software and firmware.

← Back to All Vendors
CVE-2026-26241 CRITICAL
Component: file_station

A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory o...

📅 2026-06-10
CVSS 9.1 Dossier →
CVE-2026-26240 CRITICAL
Component: file_station

A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory o...

📅 2026-06-10
CVSS 9.1 Dossier →
Component: file_station

A buffer overflow vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulne...

📅 2026-06-10
CVSS 8.1 Dossier →
Component: qumagie

A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthori...

📅 2026-06-10
CVSS 7.5 Dossier →
Component: file_station

An incorrect authorization vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit ...

📅 2026-06-10
CVSS 8.1 Dossier →
Component: file_station

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 6. If a remote attacker gains a user ac...

📅 2026-06-10
CVSS 6.5 Dossier →
Component: qts

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator acco...

📅 2026-06-10
CVSS 7.2 Dossier →
Component: qts

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account...

📅 2026-06-10
CVSS 6.5 Dossier →
Component: qts

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrat...

📅 2026-06-10
CVSS 7.2 Dossier →
Component: file_station

A NULL pointer dereference vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit ...

📅 2026-06-10
CVSS 6.5 Dossier →
Component: qts

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator acco...

📅 2026-06-10
CVSS 7.2 Dossier →
Component: qts

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the...

📅 2026-06-10
CVSS 7.2 Dossier →
Component: qts

An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an admi...

📅 2026-06-10
CVSS 7.2 Dossier →
Component: qts

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator acco...

📅 2026-06-10
CVSS 7.2 Dossier →
Component: qts

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator acco...

📅 2026-06-10
CVSS 7.2 Dossier →
Component: license_center

A path traversal vulnerability has been reported to affect License Center. If a local attacker gains an administrator account, they can then exploit t...

📅 2026-06-10
CVSS 4.4 Dossier →
Component: quts_hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrat...

📅 2026-06-10
CVSS 7.2 Dossier →
CVE-2025-66276 CRITICAL
Component: qts

QuTS hero is not affected. We have already fixed the vulnerability in the following version: QTS 5.2.7.3256 build 20250913 and later...

📅 2026-06-10
CVSS 9.8 Dossier →
CVE-2026-44083 CRITICAL
Component: qumagie

An authorization bypass through user-controlled key vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulne...

📅 2026-06-09
CVSS 9.8 Dossier →
Component: qts

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun...

📅 2026-06-09
CVSS 6.5 Dossier →
Component: qts

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit t...

📅 2026-06-09
CVSS 6.1 Dossier →
Component: qumagie

A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthori...

📅 2026-06-09
CVSS 7.5 Dossier →
Component: qunetswitch

A command injection vulnerability has been reported to affect QuNetSwitch. If a local attacker gains an administrator account, they can then exploit t...

📅 2026-03-20
CVSS 6.7 Dossier →
CVE-2026-22901 CRITICAL
Component: qunetswitch

A command injection vulnerability has been reported to affect QuNetSwitch. If a remote attacker gains a user account, they can then exploit the vulner...

📅 2026-03-20
CVSS 9.8 Dossier →
Page 1 of 27 (633 Total Records)