Skip to content
THREATWIRE

CVE Tracker · Vendor

QNAP CVEs

14 CVEs in the tracker, 11 in the CISA KEV catalogue.

All vendors · RSS feed for QNAP · Tracker data last updated 18 Oct 2026.

Showing 14 of 14

  1. CVE-2026-44084CVSS 7.5 highEPSS 0.41%2026-10-15

    video station. An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station.…

  2. CVE-2026-26245CVSS 8.8 highEPSS 0.51%2026-10-15

    video station. A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user ac…

  3. CVE-2026-26244CVSS 8.8 highEPSS 0.51%2026-10-15

    video station. A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user ac…

  4. CVE-2023-47565No CVSSEPSS 73.3%KEV

    VioStor NVR. QNAP VioStor NVR OS Command Injection Vulnerability

  5. CVE-2022-27593No CVSSEPSS 87.9%KEV

    Photo Station. QNAP Photo Station Externally Controlled Reference Vulnerability

  6. CVE-2021-28799No CVSSEPSS 78.3%KEV

    Network Attached Storage (NAS). QNAP NAS Improper Authorization Vulnerability

  7. CVE-2020-2509No CVSSEPSS 34.0%KEV

    QNAP Network-Attached Storage (NAS). QNAP Network-Attached Storage (NAS) Command Injection Vulnerability

  8. CVE-2019-7195No CVSSEPSS 89.5%KEV

    Photo Station. QNAP Photo Station Path Traversal Vulnerability

  9. CVE-2019-7194No CVSSEPSS 83.1%KEV

    Photo Station. QNAP Photo Station Path Traversal Vulnerability

  10. CVE-2019-7193No CVSSEPSS 14.4%KEV

    QTS. QNAP QTS Improper Input Validation Vulnerability

  11. CVE-2019-7192No CVSSEPSS 88.1%KEV

    Photo Station. QNAP Photo Station Improper Access Control Vulnerability

  12. CVE-2018-19953No CVSSEPSS 29.0%KEV

    Network Attached Storage (NAS). QNAP NAS File Station Cross-Site Scripting Vulnerability

  13. CVE-2018-19949No CVSSEPSS 28.6%KEV

    Network Attached Storage (NAS). QNAP NAS File Station Command Injection Vulnerability

  14. CVE-2018-19943No CVSSEPSS 21.5%KEV

    Network Attached Storage (NAS). QNAP NAS File Station Cross-Site Scripting Vulnerability