Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium5.3A path traversal vulnerability has been reported to affect Qsync Central.CVE-2026-24718 · QNAP Systems Inc. · Qsync Central · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.4%Oct 15, 2026
Medium5.3An observable timing discrepancy vulnerability has been reported to affect QuRouter.CVE-2026-24715 · QNAP Systems Inc. · QuRouter · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.2%Oct 15, 2026
Medium6.2A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch.CVE-2026-22896 · QNAP Systems Inc. · Network & Virtual Switch · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.4%Oct 15, 2026
High7.5A time-of-check time-of-use (toctou) race condition vulnerability has been reported to affect QuRouter.CVE-2025-68404 · QNAP Systems Inc. · QuRouter · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.2%Oct 15, 2026
Medium4.6An external control of system or configuration setting vulnerability has been reported to affect QuRouter.CVE-2025-68403 · QNAP Systems Inc. · QuRouter · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.1%Oct 15, 2026
High7.7A path traversal vulnerability has been reported to affect Video Station.CVE-2025-66275 · QNAP Systems Inc. · Video Station · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.4%Oct 15, 2026
High7.7A path traversal vulnerability has been reported to affect Video Station.CVE-2025-66272 · QNAP Systems Inc. · Video Station · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.4%Oct 15, 2026
Low2.3A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central.CVE-2025-29897 · QNAP Systems Inc. · Qsync Central · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.3%Oct 15, 2026
Low2.3A NULL pointer dereference vulnerability has been reported to affect Qsync Central.CVE-2025-29896 · QNAP Systems Inc. · Qsync Central · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.3%Oct 15, 2026
Low2.3A NULL pointer dereference vulnerability has been reported to affect Qsync Central.CVE-2025-29895 · QNAP Systems Inc. · Qsync Central · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.3%Oct 15, 2026
Medium5.1A NULL pointer dereference vulnerability has been reported to affect QTS, QVP, QuTS cloud and QuTS hero.CVE-2025-62850 · QNAP Systems Inc. · QTS · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.4%Jun 10, 2026
Medium5.7A command injection vulnerability has been reported to affect QuNetSwitch.CVE-2026-22902 · qnap · qunetswitch · CVE.org · FIRST EPSS · NIST NVD · QNAPEPSS 0.5%Mar 20, 2026
Medium6.3A command injection vulnerability has been reported to affect QuNetSwitch.CVE-2026-22901 · qnap · qunetswitch · CVE.org · FIRST EPSS · NIST NVD · QNAPEPSS 0.9%Mar 20, 2026
Medium6.8A use of hard-coded credentials vulnerability has been reported to affect QuNetSwitch.CVE-2026-22900 · qnap · qunetswitch · CVE.org · FIRST EPSS · NIST NVD · QNAPEPSS 0.3%Mar 20, 2026
Critical9.3A missing authentication for critical function vulnerability has been reported to affect QVR Pro.CVE-2026-22898 · qnap · qvr pro · CVE.org · FIRST EPSS · NIST NVD · QNAPEPSS 0.7%Mar 20, 2026
High8.1A command injection vulnerability has been reported to affect QuNetSwitch.CVE-2026-22897 · qnap · qunetswitch · CVE.org · FIRST EPSS · NIST NVD · QNAPEPSS 1.1%Mar 20, 2026
Medium6.2A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service.CVE-2026-22895 · qnap · quftp · CVE.org · FIRST EPSS · NIST NVD · QNAPEPSS 0.2%Mar 20, 2026
High7.3An SQL injection vulnerability has been reported to affect QHora.CVE-2025-62846 · qnap · qurouter · CVE.org · FIRST EPSS · NIST NVD · QNAPEPSS 0.2%Mar 20, 2026
Medium5.6An improper neutralization of escape, meta, or control sequences vulnerability has been reported to affect QHora.CVE-2025-62845 · qnap · qurouter · CVE.org · FIRST EPSS · NIST NVD · QNAPEPSS 0.2%Mar 20, 2026
Medium4.0A weak authentication vulnerability has been reported to affect QHora.CVE-2025-62844 · qnap · qurouter · CVE.org · FIRST EPSS · NIST NVD · QNAPEPSS 0.2%Mar 20, 2026
Low0.9An improper restriction of communication channel to intended endpoints vulnerability has been reported to affect QHora.CVE-2025-62843 · qnap · qurouter · CVE.org · FIRST EPSS · NIST NVD · QNAPEPSS 0.3%Mar 20, 2026
Low2.7A buffer overflow vulnerability has been reported to affect Media Streaming Add-On.CVE-2025-59383 · qnap · media streaming add-on · CVE.org · FIRST EPSS · NIST NVD · QNAPEPSS 0.3%Mar 20, 2026
Medium6.6A use of hard-coded password vulnerability has been reported to affect Hyper Data Protector.CVE-2025-59388 · qnap · hyper data protector · CVE.org · FIRST EPSS · NIST NVD · QNAPEPSS 0.5%Mar 12, 2026
Low2.0A command injection vulnerability has been reported to affect several QNAP operating system versions.CVE-2024-14026 · qnap · qts · CVE.org · FIRST EPSS · NIST NVD · QNAPEPSS 0.6%Mar 11, 2026
Low0.1An SQL injection vulnerability has been reported to affect Video Station.CVE-2024-14025 · qnap · video station · CVE.org · FIRST EPSS · NIST NVD · QNAPEPSS 0.1%Mar 11, 2026