What’s Vulnerable › Products

QNAP QTS vulnerabilities

283 known vulnerabilities, 7 confirmed exploited in the wild (CISA KEV), 119 published in the last 12 months.

Check whether your QNAP QTS version is affected

Exploited QNAP QTS vulnerabilities

• CVE-2019-7193 — QNAP QTS Improper Input Validation Vulnerability
• CVE-2018-19953 — QNAP NAS File Station Cross-Site Scripting Vulnerability
• CVE-2018-19949 — QNAP NAS File Station Command Injection Vulnerability
• CVE-2018-19943 — QNAP NAS File Station Cross-Site Scripting Vulnerability
• CVE-2020-2509 — QNAP Network-Attached Storage (NAS) Command Injection Vulnerability
• CVE-2014-7169 — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
• CVE-2014-6271 — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

Latest QNAP QTS vulnerabilities

• CVE-2026-24719 — QTS, QuTS hero (CVSS 7.2)
• CVE-2026-24717 — QTS, QuTS hero (CVSS 6.5)
• CVE-2026-24716 — QTS, QuTS hero (CVSS 7.2)
• CVE-2026-22893 — QTS, QuTS hero (CVSS 7.2)
• CVE-2025-66281 — QTS, QuTS hero (CVSS 7.2)
• CVE-2025-66280 — QTS, QuTS hero (CVSS 7.2)
• CVE-2025-66279 — QTS, QuTS hero (CVSS 7.2)
• CVE-2025-66273 — QTS, QuTS hero (CVSS 7.2)
• CVE-2025-66276 — QTS (CVSS 9.8)
• CVE-2025-62858 — QTS, QuTS hero (CVSS 6.5)
• CVE-2026-41539 — QTS, QuTS hero (CVSS 6.1)
• CVE-2024-14026 — QTS, QuTS hero (CVSS 7.8)
• CVE-2025-66277 — QTS, QuTS hero (CVSS 9.8)
• CVE-2025-58466 — QTS, QuTS hero (CVSS 4.9)
• CVE-2025-48725 — QuTS hero (CVSS 8.1)
• CVE-2025-47205 — QTS, QuTS hero (CVSS 4.9)
• CVE-2025-9110 — QTS, QuTS hero (CVSS 7.5)
• CVE-2025-62852 — QTS, QuTS hero (CVSS 6.5)
• CVE-2025-59381 — QTS, QuTS hero (CVSS 4.9)
• CVE-2025-59380 — QTS, QuTS hero (CVSS 4.9)
• CVE-2025-48721 — QTS, QuTS hero (CVSS 6.5)
• CVE-2025-57705 — QTS, QuTS hero (CVSS 4.9)
• CVE-2025-54166 — QTS, QuTS hero (CVSS 4.9)
• CVE-2025-54165 — QTS, QuTS hero (CVSS 4.9)
• CVE-2025-54164 — QTS, QuTS hero (CVSS 4.9)