security@qnapsecurity.com.tw
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS security@qnapsecurity.com.tw
03
assessed vulnerabilities (567)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-53882US | — | — | ||
An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they… | ||||
| CVE-2026-50619US | — | — | ||
A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the contents of unexpected files or system d… | ||||
| CVE-2026-50612US | — | — | ||
An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie. If a remote attacker gains a user account, they can then exploit the vulnerability to c… | ||||
| CVE-2026-47790US | — | — | ||
A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a remote attacker gains a user account, they can then exploit the vulnerability to inject m… | ||||
| CVE-2026-47786US | — | — | ||
An OS command injection vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands.
W… | ||||
| CVE-2026-44084US | high7.5 | — | ||
An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain… | ||||
| CVE-2026-41545US | — | — | ||
A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read th… | ||||
| CVE-2026-41541US | — | — | ||
An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerabilit… | ||||
| CVE-2026-39997US | —OT elevated | — | ||
A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain ac… | ||||
| CVE-2026-39991US | — | — | ||
A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If a remote attacker gains a user account, they can then exploit the vulnerability to inject… | ||||
| CVE-2026-39989US | — | — | ||
A server-side request forgery (SSRF) vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability… | ||||
| CVE-2026-34015US | medium6.5 | — | ||
A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of… | ||||
| CVE-2026-34014US | — | — | ||
An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station. If a local attacker gains an administrator account, they can th… | ||||
| CVE-2026-34009US | — | — | ||
An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local attacker gains an administrator account, they can then exploit t… | ||||
| CVE-2026-34008US | — | — | ||
An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If a local attacker gains a user account, they can then exploit… | ||||
| CVE-2026-34007US | — | — | ||
An OS command injection vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands.
We h… | ||||
| CVE-2026-34006US | —OT elevated | — | ||
A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE. If exploited, the vulnerability could allow remote attackers to gain acce… | ||||
| CVE-2026-26245US | high8.8 | — | ||
A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized… | ||||
| CVE-2026-26244US | high8.8 | — | ||
A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized… | ||||
| CVE-2026-26243US | — | — | ||
A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of… | ||||