QNAP Systems Inc. QuRouter

Name: QNAP Systems Inc. QuRouter
Brand: QNAP Systems Inc.

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

by severity

3critical4high5medium0low

updated 2026-10-28

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-48860US	critical9.8	1.46% (74th)	—	2.4.3.103	2024-11-22	2.4.x → 2.4.3.103
CVE-2024-53700US	high7.2	1.23% (69th)	—	2.4.6.028	2025-03-07	2.4.x → 2.4.6.028
CVE-2024-50390US	critical9.8OT elevated	1.05% (64th)	—	2.4.5.032	2025-03-07	2.4.x → 2.4.5.032
CVE-2025-29887US	high7.2	0.84% (58th)	—	2.5.1.060	2025-08-29	2.5.x → 2.5.1.060
CVE-2024-50389US	critical9.8	0.83% (57th)	—	2.4.5.032	2024-12-06	2.4.x → 2.4.5.032
CVE-2024-48861US	high7.8	0.76% (55th)	—	2.4.4.106	2024-11-22	2.4.x → 2.4.4.106
CVE-2024-13087US	medium6.7	0.62% (50th)	—	2.4.6.028	2025-06-06	2.4.x → 2.4.6.028
CVE-2025-62843US	medium6.8	0.29% (22nd)	—	2.6.3.009	2026-03-20	2.6.x → 2.6.3.009
CVE-2024-13088US	high7.8	0.27% (18th)	—	2.5.0.140	2025-06-06	2.5.x → 2.5.0.140
CVE-2025-62846US	medium6.7	0.21% (11th)	—	2.6.2.007	2026-03-20	2.6.x → 2.6.2.007
CVE-2025-62844US	medium5.5	0.21% (10th)	—	2.6.2.007	2026-03-20	2.6.x → 2.6.2.007
CVE-2025-62845US	medium6.7	0.19% (9th)	—	2.6.3.009	2026-03-20	2.6.x → 2.6.3.009

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')6 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')4 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2 CVEs
CWE-1188Initialization of a Resource with an Insecure Default1 CVEs
CWE-1390Weak Authentication1 CVEs
CWE-150Improper Neutralization of Escape, Meta, or Control Sequences1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-287Improper Authentication1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.