How many QNAP QTS CVEs are in CISA KEV?

Yes — 12 of QNAP QTS's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for QNAP QTS vulnerabilities?

Yes — 21 of QNAP QTS's CVEs have a known public exploit.

Which versions of QNAP QTS are affected?

625 distinct QNAP QTS versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in QNAP QTS CVEs?

QNAP QTS's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-476 (NULL Pointer Dereference), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-121 (Stack-based Buffer Overflow).

How many critical QNAP QTS vulnerabilities are there?

QNAP QTS has 54 critical and 106 high-severity CVEs.

What is the average severity of QNAP QTS CVEs?

The average CVSS base score across QNAP QTS's scored CVEs is 6.5.

QNAP QTS Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: QNAP QTS vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

QNAP QTS Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

QNAP QTS has 323 published CVE records since 2014, of which 12 are in CISA's Known Exploited Vulnerabilities catalog and 21 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting QNAP QTS, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include build 20180710, build 20180711, build 20180725, build 20190322, build 20190328, build 20200107.

Severity and exploitation

How the CVSS severity of QNAP QTS's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical54

High106

Medium121

Low42

In CISA’s Known Exploited Vulnerabilities catalog

12 of QNAP QTS's CVEs are confirmed exploited in the wild.

Public exploits

21 of QNAP QTS's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every QNAP QTS version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

< 4.4.3.13545 CVEs
< 4.2.64 CVEs
< 4.3.3.13154 CVEs
< 4.3.4.13684 CVEs
< 4.3.6.13334 CVEs
< 4.5.1.14564 CVEs
4.5.x2 CVEs
5.0.x2 CVEs
< 4.5.1.14561 CVE

Version ranges

5.2.0.2737 <= v <= 5.2.0.2737108 CVEs
5.2.0.2744 <= v <= 5.2.0.2744108 CVEs

Common weakness types

The CWE weakness categories most often found in QNAP QTS CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many QNAP QTS CVEs were published each year.

2015

2016

2017

2018

2019

2020

2021

Other QNAP products

Browse vulnerabilities for other products by QNAP.

QuTS hero253 CVEs qutscloud77 CVEs Qsync Central63 CVEs File Station 555 CVEs file station54 CVEs Photo Station26 CVEs Video Station15 CVEs media streaming add-on13 CVEs

Frequently asked questions

Common questions about QNAP QTS vulnerabilities.

How many CVEs does QNAP QTS have?: QNAP QTS has 323 published CVE records since 2014.
How many QNAP QTS CVEs are in CISA KEV?: Yes — 12 of QNAP QTS's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for QNAP QTS vulnerabilities?: Yes — 21 of QNAP QTS's CVEs have a known public exploit.
Which versions of QNAP QTS are affected?: 625 distinct QNAP QTS versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in QNAP QTS CVEs?: QNAP QTS's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-476 (NULL Pointer Dereference), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-121 (Stack-based Buffer Overflow).
How many critical QNAP QTS vulnerabilities are there?: QNAP QTS has 54 critical and 106 high-severity CVEs.
What is the average severity of QNAP QTS CVEs?: The average CVSS base score across QNAP QTS's scored CVEs is 6.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track QNAP QTS vulnerabilities

Monitor new QNAP QTS vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

Fixed in

5.2.6.3195 build 2025071528 CVEs
5.2.7.3256 build 2025091319 CVEs
5.1.4.2596 build 2023112816 CVEs
5.2.1.2930 build 2024102516 CVEs
4.5.4.2627 build 2023122514 CVEs
5.1.3.2578 build 2023111011 CVEs
5.1.6.2722 build 2024040211 CVEs
5.2.5.3145 build 2025052611 CVEs
4.2.610 CVEs
5.1.2.2533 build 2023092610 CVEs
5.1.0.2444 build 202306299 CVEs
5.1.5.2645 build 202401169 CVEs
5.1.9.2954 build 202411209 CVEs
4.5.4.26278 CVEs
5.1.0.24448 CVEs
5.2.2.2950 build 202411148 CVEs
4.5.1.14567 CVEs
5.0.1.24257 CVEs
5.0.1.2425 build 202306097 CVEs
5.2.3.3006 build 202501087 CVEs
5.2.8.3332 build 202511287 CVEs
5.2.9.3410 build 202602147 CVEs
4.4.3.13546 CVEs
4.5.4.2467 build 202307186 CVEs
5.1.7.2770 build 202405206 CVEs
4.5.4.19915 CVEs
4.5.4.24675 CVEs
4.5.x5 CVEs
5.0.0.19865 CVEs
5.0.0.1986 build 202203245 CVEs
5.1.3.25785 CVEs
5.1.8.2823 build 202407125 CVEs
5.2.9.34105 CVEs
4.3.3.13154 CVEs
4.3.3.1624 Build 202104164 CVEs
4.3.3.19454 CVEs
4.3.4.13684 CVEs
4.3.4.19764 CVEs
4.3.64 CVEs
4.3.6.13334 CVEs
4.3.6.19654 CVEs
4.5.4.1991 build 202203294 CVEs
5.1.7.27704 CVEs
5.2.7.3297 build 202510244 CVEs
5.2.9.3492 build 202605074 CVEs
4.5.33 CVEs
4.5.4.17153 CVEs
4.5.4.1715 build 202106303 CVEs
4.5.4.2374 build 202304163 CVEs
5.0.1.23463 CVEs
5.0.1.2346 build 202303223 CVEs
5.0.1.2376 build 202304213 CVEs
5.0.1.2514 build 202309063 CVEs
5.0.x3 CVEs
5.1.4.25963 CVEs
5.2.9.34923 CVEs
> 4.2.62 CVEs
> 4.3.32 CVEs
> 4.3.42 CVEs
4.1.12 CVEs
4.2.6 build 202306212 CVEs
4.3.32 CVEs
4.3.3.11612 CVEs
4.3.3.16242 CVEs
4.3.3.16932 CVEs
4.3.3.2420 build 202306212 CVEs
4.3.4.11902 CVEs
4.3.4.2451 build 202306212 CVEs
4.3.6.12182 CVEs
4.3.6.1620 Build 202103222 CVEs
4.3.6.16632 CVEs
4.3.6.1663 Build 202105042 CVEs
4.3.6.17502 CVEs
4.3.6.2441 build 202306212 CVEs
4.4.1.12012 CVEs
4.4.2.12312 CVEs
4.4.3.14212 CVEs
4.5.12 CVEs
4.5.1.1540 build 202101072 CVEs
4.5.2.1566 Build 202102022 CVEs
4.5.4.2790 build 202406052 CVEs
5.0.0.17162 CVEs
5.0.0.1716 build 202107012 CVEs
5.1.5.26452 CVEs
5.1.8.28232 CVEs
5.2.4.3079 build 202503212 CVEs
> 4.4.3.14441 CVE
4.2.6 build 202103271 CVE
4.2.6 Build 202103271 CVE
4.2.6 build 202203041 CVE
4.2.6 build 202401311 CVE
4.2.6 build 202406181 CVE
4.2.6_build_202406181 CVE
4.2.x1 CVE
4.3.3.12521 CVE
4.3.3.1432 build 202010061 CVE
4.3.3.1693 build 202106241 CVE
4.3.3.1945 build 202203031 CVE
4.3.3.24201 CVE
4.3.3.26441 CVE
4.3.3.2644 build 202401311 CVE
4.3.3.2784 build 202406191 CVE
4.3.3.2784_build_202406191 CVE
4.3.4.08991 CVE
4.3.4.12821 CVE
4.3.4.1463 build 202010061 CVE
4.3.4.1632 Build 202103241 CVE
4.3.4.1976 build 202203031 CVE
4.3.4.2451 CVE
4.3.4.26751 CVE
4.3.4.2675 build 202401311 CVE
4.3.4.2814 build 202406181 CVE
4.3.4.2814_build_202406181 CVE
4.3.6.08951 CVE
4.3.6.12631 CVE
4.3.6.1446 build 202009291 CVE
4.3.6.1750 build 202107301 CVE
4.3.6.1965 build 202203021 CVE
4.3.6.24411 CVE
4.3.6.26651 CVE
4.3.6.2665 build 202401311 CVE
4.3.6.2805 build 202406191 CVE
4.3.6.2805_build_202406191 CVE
4.3.x1 CVE
4.4.01 CVE
4.4.1.12611 CVE
4.4.2.12701 CVE
4.4.x1 CVE
4.5.*1 CVE
4.5.1.1456 build 202010151 CVE
4.5.1.14951 CVE
4.5.1.1495 Build 202011231 CVE
4.5.1.15401 CVE
4.5.2.15661 CVE
4.5.2.1566 build 202102021 CVE
4.5.2.16301 CVE
4.5.2.1630 Build 202104061 CVE
4.5.3.16521 CVE
4.5.3.1652 Build 202104281 CVE
4.5.4.17871 CVE
4.5.4.1787 build 202109101 CVE
4.5.4.22801 CVE
4.5.4.2280 build 202301121 CVE
4.5.4.23741 CVE
4.5.4.2627_build 202312251 CVE
4.5.4.2790_build_202406051 CVE
4.5.4.29571 CVE
4.5.4.2957 build 202411191 CVE
4.6.01 CVE
4.x1 CVE
5.*.*1 CVE
5.0.1.22341 CVE
5.0.1.2234 build 202212011 CVE
5.0.1.22771 CVE
5.0.1.23761 CVE
5.0.1.25141 CVE
5.1.0.2399 build 202305151 CVE
5.1.0.2441 CVE
5.1.1.24911 CVE
5.1.1.2491 build 202308151 CVE
5.1.3.2578_build 202311101 CVE
5.1.4.2596_build 202311281 CVE
5.1.6.2722_build_202404021 CVE
5.1.x1 CVE
5.2.0.27371 CVE
5.2.0.2737 build 202404171 CVE
5.2.0.2782 build 202406011 CVE
5.2.0.2802 build 202406201 CVE
5.2.0.28511 CVE
5.2.7.32561 CVE
5.2.8.3350 build 202512161 CVE
5.2.x1 CVE
5.x1 CVE
QTS 5.2.0.2851 build 202408081 CVE

Find a version

323 CVEs

Sort

QTS, QuTS hero
CVE-2026-24719
Patch
CWE-78
Medium · CVSS 6.1
EPSS 1.0% (60th pct)2026-06-10
QTS, QuTS hero
CVE-2026-24717
Patch
CWE-22
Low · CVSS 1.2
EPSS 0.4% (32th pct)2026-06-10
QTS, QuTS hero
CVE-2026-24716
Patch
CWE-476
Low · CVSS 1.2
EPSS 0.3% (26th pct)2026-06-10
QTS, QuTS hero
CVE-2026-22893
Patch
CWE-78
High · CVSS 8.6
EPSS 1.1% (63th pct)2026-06-10
QTS, QuTS hero
CVE-2025-66281
Patch
CWE-476
Medium · CVSS 6.9
EPSS 0.5% (38th pct)2026-06-10
QTS, QuTS hero
CVE-2025-66280
Patch
CWE-121
Medium · CVSS 5.1
EPSS 0.4% (36th pct)2026-06-10
QTS, QuTS hero
CVE-2025-66279
Patch
CWE-78
High · CVSS 8.6
EPSS 1.1% (62th pct)2026-06-10
QTS, QuTS hero
CVE-2025-66273
Patch
CWE-78
High · CVSS 8.6
EPSS 1.1% (62th pct)2026-06-10
QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)
CVE-2025-59382
Patch
CWE-472
Low · CVSS 1.2
EPSS 0.4% (30th pct)2026-06-10
QTS
CVE-2025-66276
Patch
Critical · CVSS 9.2
EPSS 0.3% (21th pct)2026-06-10
QTS, QuTS hero
CVE-2025-62858
Patch
CWE-121
Medium · CVSS 5.1
EPSS 0.4% (37th pct)2026-06-09
QTS, QuTS hero
CVE-2026-41539
Patch
CWE-79
Medium · CVSS 6.3
EPSS 0.2% (9th pct)2026-06-09
QTS, QuTS hero
CVE-2024-14026
Patch
CWE-78
Low · CVSS 2.0
EPSS 0.6% (48th pct)2026-03-11
QTS, QuTS hero
CVE-2025-47205
Patch
CWE-476
Medium · CVSS 5.1
EPSS 0.4% (34th pct)2026-02-11
QuTS hero
CVE-2025-48725
Patch
CWE-121
Low · CVSS 0.6
EPSS 0.4% (33th pct)2026-02-11
QTS, QuTS hero
CVE-2025-58466
Patch
CWE-457
Low · CVSS 1.2
EPSS 0.5% (41th pct)2026-02-11
QTS, QuTS hero
CVE-2025-66274
Patch
CWE-476
Medium · CVSS 5.1
EPSS 0.4% (30th pct)2026-02-11
QTS, QuTS hero
CVE-2025-66277
Patch
CWE-59
Critical · CVSS 9.2
EPSS 0.6% (48th pct)2026-02-11
QTS, QuTS hero
CVE-2025-62852
Patch
CWE-121
Low · CVSS 1.2
EPSS 0.4% (28th pct)2026-01-02
QTS, QuTS hero
CVE-2025-59381
Patch
CWE-22
Medium · CVSS 6.9
EPSS 0.5% (38th pct)2026-01-02
QTS, QuTS hero
CVE-2025-59380
Patch
CWE-22
Medium · CVSS 4.6
EPSS 0.6% (46th pct)2026-01-02
QTS, QuTS hero
CVE-2025-48721
Patch
CWE-121
Low · CVSS 1.2
EPSS 0.4% (36th pct)2026-01-02
QTS, QuTS hero
CVE-2025-9110
Patch
CWE-497
Low · CVSS 2.7
EPSS 0.5% (38th pct)2026-01-02
QTS, QuTS hero
CVE-2025-57705
Patch
CWE-770
Medium · CVSS 4.6
EPSS 0.3% (28th pct)2026-01-02
QTS, QuTS hero
CVE-2025-54166
Patch
CWE-125
Medium · CVSS 4.6
EPSS 0.3% (26th pct)2026-01-02
QTS, QuTS hero
CVE-2025-54165
Patch
CWE-125
Medium · CVSS 4.6
EPSS 0.3% (26th pct)2026-01-02
QTS, QuTS hero
CVE-2025-54164
Patch
CWE-125
Medium · CVSS 4.6
EPSS 0.3% (26th pct)2026-01-02
QTS, QuTS hero
CVE-2025-53596
Patch
CWE-476
Low · CVSS 1.2
EPSS 0.3% (28th pct)2026-01-02
QTS, QuTS hero
CVE-2025-53593
Patch
CWE-121
Low · CVSS 1.2
EPSS 0.4% (28th pct)2026-01-02
QTS, QuTS hero
CVE-2025-53592
Patch
CWE-476
Low · CVSS 1.3
EPSS 0.3% (26th pct)2026-01-02

Showing 30 of 323