qnap Vulnerability Advisory Catalog

Total 633 security vulnerabilities recorded for qnap software and firmware.

← Back to All Vendors
CVE-2026-22900 CRITICAL
Component: qunetswitch

A use of hard-coded credentials vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to gain...

📅 2026-03-20
CVSS 9.8 Dossier →
CVE-2026-22898 CRITICAL
Component: qvr_pro

A missing authentication for critical function vulnerability has been reported to affect QVR Pro. The remote attackers can then exploit the vulnerabil...

📅 2026-03-20
CVSS 9.8 Dossier →
CVE-2026-22897 CRITICAL
Component: qunetswitch

A command injection vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to execute arbitrar...

📅 2026-03-20
CVSS 9.8 Dossier →
Component: quftp

A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a remote attacker gains an administrator account, they can th...

📅 2026-03-20
CVSS 4.8 Dossier →
Component: qurouter

An SQL injection vulnerability has been reported to affect QHora. If a local attacker gains an administrator account, they can then exploit the vulner...

📅 2026-03-20
CVSS 6.7 Dossier →
Component: qurouter

An improper neutralization of escape, meta, or control sequences vulnerability has been reported to affect QHora. If a local attacker gains an adminis...

📅 2026-03-20
CVSS 6.7 Dossier →
Component: qurouter

A weak authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulnerabil...

📅 2026-03-20
CVSS 5.5 Dossier →
Component: qurouter

An improper restriction of communication channel to intended endpoints vulnerability has been reported to affect QHora. If an attacker gains physical ...

📅 2026-03-20
CVSS 6.8 Dossier →
CVE-2025-59383 CRITICAL
Component: media_streaming_add-on

A buffer overflow vulnerability has been reported to affect Media Streaming Add-On. The remote attackers can then exploit the vulnerability to modify ...

📅 2026-03-20
CVSS 9.1 Dossier →
CVE-2025-59388 CRITICAL
Component: hyper_data_protector

A use of hard-coded password vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability t...

📅 2026-03-12
CVSS 9.8 Dossier →
Component: qts

A command injection vulnerability has been reported to affect several QNAP operating system versions. If an attacker gains local network access who ha...

📅 2026-03-11
CVSS 7.8 Dossier →
Component: video_station

An SQL injection vulnerability has been reported to affect Video Station. If an attacker gains local network access who have also gained an administra...

📅 2026-03-11
CVSS 6.7 Dossier →
Component: video_station

An improper certificate validation vulnerability has been reported to affect Video Station. If an attacker gains local network access who have also ga...

📅 2026-03-11
CVSS 6.7 Dossier →
Component: file_station

A path traversal vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulner...

📅 2026-02-11
CVSS 6.5 Dossier →
Component: qsync_central

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnera...

📅 2026-02-11
CVSS 6.5 Dossier →
Component: file_station

A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulner...

📅 2026-02-11
CVSS 6.5 Dossier →
CVE-2025-66277 CRITICAL
Component: qts

A link following vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerabi...

📅 2026-02-11
CVSS 9.8 Dossier →
Component: quts_hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrat...

📅 2026-02-11
CVSS 4.9 Dossier →
Component: file_station

A path traversal vulnerability has been reported to affect File Station 5. If a local attacker gains an administrator account, they can then exploit t...

📅 2026-02-11
CVSS 4.4 Dossier →
Component: file_station

A path traversal vulnerability has been reported to affect File Station 5. If a local attacker gains an administrator account, they can then exploit t...

📅 2026-02-11
CVSS 4.4 Dossier →
Component: file_station

An uncontrolled resource consumption vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can the...

📅 2026-02-11
CVSS 6.5 Dossier →
Component: file_station

A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulner...

📅 2026-02-11
CVSS 6.5 Dossier →
Component: quts_hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrat...

📅 2026-02-11
CVSS 4.9 Dossier →
Component: qsync_central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains an administrator account, they can then...

📅 2026-02-11
CVSS 4.9 Dossier →
Page 2 of 27 (633 Total Records)