What’s Vulnerable › Products

QNAP Systems Inc. QcalAgent vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your QNAP Systems Inc. QcalAgent version is affected

Latest QNAP Systems Inc. QcalAgent vulnerabilities

• CVE-2026-41544 — Path Traversal leading to Arbitrary File Move, Docker Escape, and Host RCE in /calapi/renameUpload endpoint (CVSS 8.7)
• CVE-2024-27123 — QcalAgent (CVSS 5.2)
• CVE-2023-41289 — QcalAgent (CVSS 8.8)
• CVE-2021-38678 — Open Redirect Vulnerability in QcalAgent (CVSS 6.1)
• CVE-2021-38677 — Reflected XSS Vulnerability in QcalAgent (CVSS 6.1)