qnap has 60 CVEs on record between 2020 and 2026. Disclosure cadence is accelerating: 7 in the last 90 days against 2 in the 90 before. The busiest recent month was January 2026 with 32. The median CVSS is 6.5 (medium), with 4 rated critical. 5% have been exploited in the wild, in line with the corpus average. The median gap from publication to a KEV listing is 573 days (3 cases). The dominant weakness classes are CWE-476 (20) and CWE-22 (7). Most affected products: qts (24), quts_hero (20), video_station (4).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 5% vs 1% corpus
- Median CVSS
- 6.5
- Publish → KEV
- 573 d median(3)
- Last 90 days
- 7 prev 2
Weakness classes
Products
- qts 24
- quts_hero 20
- video_station 4
- file_station 3
- hybrid_backup_sync 2
- license_center 2
Worst active — by depth score
CVE-2018-19949Critical· 9.8If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands90CVE-2018-19943High· 8.0If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code79CVE-2018-19953Medium· 6.1If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code70CVE-2025-59389Critical· 9.8An SQL injection vulnerability has been reported to affect Hyper Data Protector54CVE-2025-62849Critical· 9.8An SQL injection vulnerability has been reported to affect several QNAP operating system versions54
qnap vulnerabilities
CVEs affecting qnap, newest first. Open any entry for full detail, references, and exploit status.
60 CVEsRSS
CVE-2026-26244High· 8.8A SQL injection vulnerability has been reported to affect Video Station
A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerabilit…
CVE-2026-26245High· 8.8A SQL injection vulnerability has been reported to affect Video Station
A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerabilit…
CVE-2026-44084High· 7.5An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station
An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability …
CVE-2026-34015Medium· 6.5⚖ disputedA path traversal vulnerability has been reported to affect Video Station
A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed …
CVE-2026-24723Medium· 6.5A NULL pointer dereference vulnerability has been reported to affect File Station 5
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed th…
CVE-2026-24722Medium· 6.5A NULL pointer dereference vulnerability has been reported to affect File Station 5
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed th…
CVE-2026-24721Medium· 6.5A NULL pointer dereference vulnerability has been reported to affect File Station 5
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed th…
CVE-2025-62850High· 7.2⚖ disputedA NULL pointer dereference vulnerability has been reported to affect QTS, QVP, QuTS cloud and QuTS hero
A NULL pointer dereference vulnerability has been reported to affect QTS, QVP, QuTS cloud and QuTS hero. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) att…
CVE-2025-58468High· 8.8A cross-site request forgery (CSRF) vulnerability has been reported to affect Notification Center
A cross-site request forgery (CSRF) vulnerability has been reported to affect Notification Center. The remote attackers can then exploit the vulnerability to gain privileges or hijack user identities. We have already fixed the vulnerabi…
CVE-2025-9110High· 7.5An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect several QNAP operating system versions
An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to read application d…
CVE-2025-62840Low· 3.3A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync
A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read application dat…
CVE-2025-59389Critical· 9.8An SQL injection vulnerability has been reported to affect Hyper Data Protector
An SQL injection vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following …
CVE-2025-59381Medium· 4.9A path traversal vulnerability has been reported to affect several QNAP operating system versions
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or s…
CVE-2025-53596Medium· 4.9A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS)…
CVE-2025-53593Medium· 6.5A buffer overflow vulnerability has been reported to affect several QNAP operating system versions
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We hav…
CVE-2025-53592Medium· 6.5A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. …
CVE-2025-53591Medium· 6.5A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret …
CVE-2025-53590Medium· 4.9A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS)…
CVE-2025-53589Medium· 4.9A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS)…
CVE-2025-53414Medium· 4.9A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS)…
CVE-2025-53405Medium· 4.9A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS)…
CVE-2025-52864High· 8.1A buffer overflow vulnerability has been reported to affect several QNAP operating system versions
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already …
CVE-2025-52863High· 8.1A buffer overflow vulnerability has been reported to affect several QNAP operating system versions
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already …
CVE-2025-52431Medium· 4.9A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS)…
CVE-2025-52430Medium· 4.9A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS)…
CVE-2025-52426Medium· 4.9A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS)…
CVE-2025-47208Medium· 6.5An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions
An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other…
CVE-2025-59384High· 7.5A path traversal vulnerability has been reported to affect Qfiling
A path traversal vulnerability has been reported to affect Qfiling. The remote attackers can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the followin…
CVE-2025-59380Medium· 4.9A path traversal vulnerability has been reported to affect several QNAP operating system versions
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or s…
CVE-2025-53597Medium· 6.5A buffer overflow vulnerability has been reported to affect License Center
A buffer overflow vulnerability has been reported to affect License Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vuln…