Skip to content
OpenAdvisories

Product · QNAP Systems

QuTS hero

235 known vulnerabilities.

5 results · Clear filters · Feed

  • Low 1.2
    CVE-2025-59382 Public exploit

    QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)

    QTS, QuTS hero, QuTScloud are not affected. We have already fixed the vulnerability in the following version:

  • High 8.7
    CVE-2024-53691 Public exploit EPSS 23%

    QTS, QuTS hero

    A link following vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the file system to unintended locations. We have already fi…

  • High 7.2
    CVE-2024-27130 Public exploit EPSS 38%

    QTS, QuTS hero

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network. We have already fixed the vulnerability in the foll…

  • Medium 5.8
    CVE-2023-47218 Public exploit Scanner template EPSS 90%

    QTS, QuTS hero, QuTScloud

    An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: Q…

  • Critical 9.8
    CVE-2020-2509 Exploited Public exploit EPSS 34%

    Command Injection Vulnerability in QTS and QuTS hero

    A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: …

    KEV Apr 11, 2022