QNAP NAS

Name: QNAP NAS
Brand: QNAP

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

10critical70high83medium1low

updated 2026-10-28

vulnerabilities (182)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-27130US	high8.8	37.5% (99th)	Exploit	no fix	2024-05-21	2 versions
CVE-2025-53020US	—	4.96% (92nd)	Exploit	no fix	2025-07-10	3 versions
CVE-2023-38709US	—	3.91% (90th)	Exploit	no fix	2024-04-04	3 versions
CVE-2025-23048US	—	1.04% (64th)	Exploit	no fix	2025-07-10	3 versions
CVE-2025-49812US	—	0.61% (49th)	Exploit	no fix	2025-07-10	3 versions
CVE-2025-59382US	—	0.37% (31st)	Exploit	no fix	2026-06-10	4 versions
CVE-2023-51364US	high7.5	39.7% (99th)	—	no fix	2024-04-26	≤ QTS <5.1.3.2578 build 20231110
CVE-2023-51365US	high7.5	34.8% (98th)	—	no fix	2024-04-26	≤ QTS <5.1.3.2578 build 20231110
CVE-2024-21899US	critical9.8	24.4% (98th)	—	no fix	2024-03-08	≤ QuTScloud < 5.1.0.2498 build 20230822
CVE-2024-21901US	medium4.7	18.7% (97th)	—	no fix	2024-03-08	≤ QuTScloud < 5.1.0.2498 build 20230822
CVE-2024-50387US	critical9.8	9.98% (96th)	—	no fix	2024-12-06	2 versions
CVE-2024-21900US	medium6.5	9.41% (95th)	—	no fix	2024-03-08	≤ QuTScloud < 5.1.0.2498 build 20230822
CVE-2025-30264US	high8.8	1.67% (77th)	—	no fix	2025-08-29	2 versions
CVE-2025-49630US	—	1.35% (71st)	—	no fix	2025-07-10	3 versions
CVE-2025-47212US	high7.2	1.33% (71st)	—	no fix	2025-10-03	2 versions
CVE-2024-50393US	critical9.8	1.31% (71st)	—	no fix	2024-12-06	4 versions
CVE-2024-43394US	—	1.27% (70th)	—	no fix	2025-07-10	3 versions
CVE-2023-34975US	high8.8	1.22% (69th)	—	no fix	2023-10-13	≤ QuTS hero < 4.5.4.2626 build 20231225
CVE-2023-39300US	high7.2	1.21% (68th)	—	no fix	2024-09-06	4 versions
CVE-2026-22893US	high7.2	1.09% (65th)	—	no fix	2026-06-10	4 versions
CVE-2023-34979US	high7.2	1.07% (65th)	—	no fix	2024-09-06	2 versions
CVE-2025-66279US	high7.2	1.05% (64th)	—	no fix	2026-06-10	4 versions
CVE-2025-66273US	high7.2	1.05% (64th)	—	no fix	2026-06-10	4 versions
CVE-2023-34974US	high8.8	0.99% (63rd)	—	no fix	2024-09-06	2 versions
CVE-2025-22481US	high8.8	0.97% (62nd)	—	no fix	2025-06-06	8 versions
CVE-2025-62849US	critical9.8	0.97% (62nd)	—	no fix	2025-12-16	3 versions
CVE-2024-43204US	—	0.91% (60th)	—	no fix	2025-07-10	3 versions
CVE-2023-34980US	high8.4	0.88% (59th)	—	no fix	2024-03-08	≤ QuTS hero < 4.5.4.2626 build 20231225
CVE-2025-54090US	—	0.88% (59th)	—	no fix	2025-07-23	3 versions
CVE-2025-62848US	high7.5	0.86% (58th)	—	no fix	2025-12-16	3 versions
CVE-2024-37044US	high7.2	0.85% (58th)	—	no fix	2024-11-22	2 versions
CVE-2024-37041US	high7.2	0.85% (58th)	—	no fix	2024-11-22	2 versions
CVE-2023-50364US	high8.8	0.85% (58th)	—	no fix	2024-04-26	5 versions
CVE-2024-37050US	medium6.5	0.84% (58th)	—	no fix	2024-11-22	2 versions
CVE-2024-37049US	medium6.5	0.84% (58th)	—	no fix	2024-11-22	2 versions
CVE-2024-37047US	medium6.5	0.84% (58th)	—	no fix	2024-11-22	2 versions
CVE-2024-53692US	—	0.83% (57th)	—	no fix	2025-03-07	8 versions
CVE-2025-62847US	high7.5	0.82% (57th)	—	no fix	2025-12-16	3 versions
CVE-2024-42516US	—	0.82% (57th)	—	no fix	2025-07-10	3 versions
CVE-2024-21906US	medium4.7	0.81% (57th)	—	no fix	2024-09-06	2 versions
CVE-2024-47252US	—	0.80% (56th)	—	no fix	2025-07-10	3 versions
CVE-2023-50362US	high8.8	0.76% (55th)	—	no fix	2024-04-26	5 versions
CVE-2023-50361US	high8.8	0.76% (55th)	—	no fix	2024-04-26	5 versions
CVE-2025-66277US	critical9.8	0.71% (53rd)	—	no fix	2026-02-11	2 versions
CVE-2024-27127US	high8.8	0.70% (53rd)	—	no fix	2024-05-21	2 versions
CVE-2024-27129US	high8.8	0.69% (53rd)	—	no fix	2024-05-21	2 versions
CVE-2024-27128US	high8.8	0.69% (53rd)	—	no fix	2024-05-21	2 versions
CVE-2024-37046US	medium4.9	0.69% (53rd)	—	no fix	2024-11-22	2 versions
CVE-2024-37043US	medium4.9	0.69% (53rd)	—	no fix	2024-11-22	2 versions
CVE-2024-50397US	high8.8	0.65% (51st)	—	no fix	2024-11-22	2 versions

showing 50 of 182

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-476NULL Pointer Dereference49 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')19 CVEs
CWE-121Stack-based Buffer Overflow19 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')16 CVEs
CWE-134Use of Externally-Controlled Format String14 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')11 CVEs
CWE-295Improper Certificate Validation7 CVEs
CWE-787Out-of-bounds Write7 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)182 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan