QcalAgent vulnerabilities
CVEs whose affected-version data names the QcalAgent package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-41544High· 8.7A path traversal vulnerability has been reported to affect QcalAgent
A path traversal vulnerability has been reported to affect QcalAgent. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the …
▾ TwilightQNAP Systems Inc. · QcalAgentEPSS 0.36%via NVD
CVE-2024-27123Medium· 5.2A cross-site scripting (XSS) vulnerability has been reported to affect QcalAgent
A cross-site scripting (XSS) vulnerability has been reported to affect QcalAgent. The local attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in …
▾ SunlitQNAP Systems Inc. · QcalAgentEPSS 0.18%via NVD