QNAP Systems Inc. Video Station vulnerabilities

21 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Latest QNAP Systems Inc. Video Station vulnerabilities

CVE-2026-44084 — Access Code Forgery in Video Station leading to unauthorized media access (CVSS 7.5)
CVE-2026-34015 — Remote Code Execution in upload.php of Video Station (CVSS 6.5)
CVE-2026-26245 — SQLi#2 SQL Injection in class_videos.php getSmartVideosByOffset (CVSS 8.8)
CVE-2026-26244 — SQLi#1 SQL Injection in class_videos.php _getFilters (CVSS 8.8)
CVE-2025-66275 — Remote code execution via command injection (CVSS 6.5)
CVE-2025-66272 — Arbitrary file deletion and remote code execution (CVSS 6.5)
CVE-2024-14025 — Video Station (CVSS 6.7)
CVE-2024-14024 — Video Station (CVSS 6.7)
CVE-2024-56804 — Video Station (CVSS 8.8)
CVE-2023-50360 — Video Station (CVSS 8.8)
CVE-2023-47563 — Video Station (CVSS 8.8)
CVE-2023-41288 — Video Station (CVSS 8.8)
CVE-2023-41287 — Video Station (CVSS 8.8)
CVE-2023-34977 — Video Station (CVSS 5.4)
CVE-2023-34976 — Video Station (CVSS 8.8)
CVE-2023-34975 — QTS, QuTS hero, QuTScloud (CVSS 8.8)
CVE-2021-44056 — Improper authentication in Video Station (CVSS 9.8)
CVE-2021-44055 — Information leakage in Video Station (CVSS 9.8)
CVE-2021-28812 — Command Injection Vulnerability in Video Station (CVSS 8.8)
CVE-2019-7184 — (CVSS 4.8)
CVE-2017-13071 — (CVSS 9.8)