QNAP Systems Inc. QuTScloud

Name: QNAP Systems Inc. QuTScloud
Brand: QNAP Systems Inc.

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

4critical36high16medium0low

updated 2026-10-27

vulnerabilities (59)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-47218US	high8.3	89.9% (100th)	Exploit	c5.1.5.2651	2024-02-13	c5.x → c5.1.5.2651
CVE-2023-51364US	high7.5	39.7% (99th)	—	c5.1.5.2651	2024-04-26	2 versions
CVE-2023-51365US	high7.5	34.8% (98th)	—	no fix	2024-04-26	—
CVE-2024-21899US	critical9.8	24.4% (98th)	—	c5.1.5.2651	2024-03-08	2 versions
CVE-2023-23368US	critical9.8	18.7% (97th)	—	c5.0.1.2374	2023-11-03	c5.x.x → c5.0.1.2374
CVE-2023-50358US	—	13.5% (96th)	—	c5.1.5.2651	2024-02-13	c5.x → c5.1.5.2651
CVE-2024-21900US	medium6.5	9.41% (95th)	—	c5.1.5.2651	2024-03-08	c5.x.x → c5.1.5.2651
CVE-2024-32766US	—	2.31% (83rd)	—	c5.1.5.2651	2024-04-26	2 versions
CVE-2021-34343US	high7.2	1.95% (80th)	—	c4.5.6.1755	2021-09-10	unspecified → c4.5.6.1755
CVE-2021-44051US	high8.8	1.66% (76th)	—	c5.0.1.1949	2022-05-05	unspecified → c5.0.1.1949
CVE-2023-23362US	high8.8	1.60% (76th)	—	c5.0.1.2374	2023-09-22	c5.0.1 → c5.0.1.2374
CVE-2021-44052US	high8.1	1.59% (75th)	—	c5.0.1.1998	2022-05-05	unspecified → c5.0.1.1998
CVE-2023-23367US	high7.2	1.50% (74th)	—	c5.1.0.2498	2023-11-10	c5.x.x → c5.1.0.2498
CVE-2024-27124US	—	1.44% (73rd)	—	c5.1.5.2651	2024-04-26	2 versions
CVE-2023-39297US	high8.8	1.41% (72nd)	—	c5.1.5.2651	2024-02-02	c5.x.x → c5.1.5.2651
CVE-2023-23355US	high7.2	1.23% (69th)	—	c5.0.1.2374	2023-03-29	c5.0.1 → c5.0.1.2374
CVE-2023-47566US	high7.2	1.18% (67th)	—	c5.1.5.2651	2024-02-02	c5.x.x → c5.1.5.2651
CVE-2023-45025US	critical9.8	1.13% (66th)	—	c5.1.5.2651	2024-02-02	c5.x.x → c5.1.5.2651
CVE-2023-47567US	high7.2	1.11% (66th)	—	c5.1.5.2651	2024-02-02	c5.x.x → c5.1.5.2651
CVE-2023-39302US	high7.2	1.07% (65th)	—	c5.1.5.2651	2024-02-02	c5.x.x → c5.1.5.2651
CVE-2023-41283US	high7.2	0.97% (62nd)	—	c5.1.5.2651	2024-02-02	c5.x.x → c5.1.5.2651
CVE-2023-41282US	high7.2	0.97% (62nd)	—	c5.1.5.2651	2024-02-02	c5.x.x → c5.1.5.2651
CVE-2023-41281US	high7.2	0.97% (62nd)	—	c5.1.5.2651	2024-02-02	c5.x.x → c5.1.5.2651
CVE-2021-38693US	medium5.3	0.95% (61st)	—	c5.0.1.1949	2022-05-05	unspecified → c5.0.1.1949
CVE-2021-28816US	high8.8	0.93% (60th)	—	c4.5.6.1755	2021-09-10	unspecified → c4.5.6.1755
CVE-2021-44053US	medium6.1	0.76% (55th)	—	c5.0.1.1949	2022-05-05	unspecified → c5.0.1.1949
CVE-2018-19942US	medium6.1	0.75% (55th)	—	c4.5.4.1601 build 20210309	2021-04-16	2 versions
CVE-2023-32974US	high7.5	0.73% (54th)	—	c5.1.0.2498	2023-10-13	c5.x → c5.1.0.2498
CVE-2018-19957US	medium6.1	0.71% (53rd)	—	c4.5.6.1755 build 20210809	2021-09-10	unspecified → c4.5.6.1755 build 20210809
CVE-2018-19941US	high7.5OT elevated	0.67% (52nd)	—	c4.5.2.1379	2020-12-31	unspecified → c4.5.2.1379
CVE-2021-38674US	medium6.1	0.64% (50th)	—	c4.5.7.1864	2022-01-07	unspecified → c4.5.7.1864
CVE-2023-32970US	medium4.9	0.60% (49th)	—	c5.1.0.2498	2023-10-13	c5.x → c5.1.0.2498
CVE-2023-32973US	high7.2	0.59% (48th)	—	c5.1.0.2498	2023-10-13	c5.x → c5.1.0.2498
CVE-2023-32972US	high7.2	0.59% (48th)	—	c5.1.0.2498	2023-10-06	c5.0.x → c5.1.0.2498
CVE-2023-32971US	high7.2	0.59% (48th)	—	c5.1.0.2498	2023-10-06	c5.0.x → c5.1.0.2498
CVE-2022-27600US	high7.5OT elevated	0.59% (48th)	—	c5.0.1.2374	2024-12-19	c5.x.x → c5.0.1.2374
CVE-2021-44054US	medium6.1	0.58% (48th)	—	c5.0.1.1949	2022-05-05	unspecified → c5.0.1.1949
CVE-2023-45037US	high7.2	0.58% (47th)	—	c5.1.5.2651	2024-02-02	c5.x.x → c5.1.5.2651
CVE-2023-45036US	high7.2	0.58% (47th)	—	c5.1.5.2651	2024-02-02	c5.x.x → c5.1.5.2651
CVE-2023-45035US	high7.2	0.58% (47th)	—	c5.1.5.2651	2024-02-02	c5.x.x → c5.1.5.2651
CVE-2023-41292US	high7.2	0.58% (47th)	—	c5.1.5.2651	2024-02-02	c5.x.x → c5.1.5.2651
CVE-2023-41280US	high7.2	0.58% (47th)	—	c5.1.5.2651	2024-02-02	c5.x.x → c5.1.5.2651
CVE-2023-41279US	high7.2	0.58% (47th)	—	c5.1.5.2651	2024-02-02	c5.x.x → c5.1.5.2651
CVE-2023-41273US	high7.2	0.56% (46th)	—	c5.1.5.2651	2024-02-02	c5.x.x → c5.1.5.2651
CVE-2023-41278US	high7.2	0.55% (46th)	—	c5.1.5.2651	2024-02-02	c5.x.x → c5.1.5.2651
CVE-2023-41277US	high7.2	0.55% (46th)	—	c5.1.5.2651	2024-02-02	c5.x.x → c5.1.5.2651
CVE-2023-41276US	high7.2	0.55% (46th)	—	c5.1.5.2651	2024-02-02	c5.x.x → c5.1.5.2651
CVE-2023-41275US	high7.2	0.55% (46th)	—	c5.1.5.2651	2024-02-02	c5.x.x → c5.1.5.2651
CVE-2023-47568US	high8.8	0.53% (45th)	—	c5.1.5.2651	2024-02-02	c5.x.x → c5.1.5.2651
CVE-2021-28806US	medium5.4	0.51% (43rd)	—	c4.5.5.1656 Build 20210503	2021-06-03	unspecified → c4.5.5.1656 Build 20210503

showing 50 of 59

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')16 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')14 CVEs
CWE-121Stack-based Buffer Overflow9 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')8 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')6 CVEs
CWE-787Out-of-bounds Write6 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-122Heap-based Buffer Overflow3 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)59 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan