netVigilance Vulnerability intelligence since 2004

QNAP

11 QNAP vulnerabilities with confirmed exploitation in the wild, as published by CISA; 11 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for QNAP
Vulnerability Status
overdue 973d2024-01-11 CVE-2023-47565 QNAP / VioStor NVR QNAP VioStor NVR OS Command Injection Vulnerability 2023-12-21 8.8 past due
overdue 1442d2022-09-29 CVE-2022-27593 QNAP / Photo Station QNAP Photo Station Externally Controlled Reference Vulnerability 2022-09-08 9.1 past dueransomware
overdue 1541d2022-06-22 CVE-2019-7195 QNAP / Photo Station QNAP Photo Station Path Traversal Vulnerability 2022-06-08 9.8 past dueransomware
overdue 1541d2022-06-22 CVE-2019-7194 QNAP / Photo Station QNAP Photo Station Path Traversal Vulnerability 2022-06-08 9.8 past dueransomware
overdue 1541d2022-06-22 CVE-2019-7193 QNAP / QTS QNAP QTS Improper Input Validation Vulnerability 2022-06-08 9.8 past dueransomware
overdue 1541d2022-06-22 CVE-2019-7192 QNAP / Photo Station QNAP Photo Station Improper Access Control Vulnerability 2022-06-08 9.8 past dueransomware
overdue 1549d2022-06-14 CVE-2018-19953 QNAP / Network Attached Storage (NAS) QNAP NAS File Station Cross-Site Scripting Vulnerability 2022-05-24 6.1 past dueransomware
overdue 1549d2022-06-14 CVE-2018-19949 QNAP / Network Attached Storage (NAS) QNAP NAS File Station Command Injection Vulnerability 2022-05-24 9.8 past dueransomware
overdue 1549d2022-06-14 CVE-2018-19943 QNAP / Network Attached Storage (NAS) QNAP NAS File Station Cross-Site Scripting Vulnerability 2022-05-24 5.4 past dueransomware
overdue 1592d2022-05-02 CVE-2020-2509 QNAP / QNAP Network-Attached Storage (NAS) QNAP Network-Attached Storage (NAS) Command Injection Vulnerability 2022-04-11 9.8 past due
overdue 1603d2022-04-21 CVE-2021-28799 QNAP / Network Attached Storage (NAS) QNAP NAS Improper Authorization Vulnerability 2022-03-31 9.8 past dueransomware