Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Critical9.3A path traversal vulnerability has been reported to affect Qsirch.CVE-2026-50619 · QNAP Systems Inc. · Qsirch · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.6%Oct 15, 2026
Medium6.3A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service.CVE-2026-47790 · QNAP Systems Inc. · QuFTP Service · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.5%Oct 15, 2026
Critical9.3An OS command injection vulnerability has been reported to affect HybridDesk Station.CVE-2026-47786 · QNAP Systems Inc. · HybridDesk Station · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 1.4%Oct 15, 2026
High8.9A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station.CVE-2026-39997 · QNAP Systems Inc. · HybridDesk Station · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.4%Oct 15, 2026
Medium4.8A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3.CVE-2026-39991 · QNAP Systems Inc. · Notes Station 3 · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.5%Oct 15, 2026
High8.4An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3.CVE-2026-34009 · QNAP Systems Inc. · Notes Station 3 · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.1%Oct 15, 2026
High8.5An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3.CVE-2026-34008 · QNAP Systems Inc. · Notes Station 3 · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.1%Oct 15, 2026
Medium6.9An OS command injection vulnerability has been reported to affect Notes Station 3.CVE-2026-34007 · QNAP Systems Inc. · Notes Station 3 · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 1.6%Oct 15, 2026
High8.7An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station.CVE-2026-53882 · QNAP Systems Inc. · Virtualization Station · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.5%Oct 15, 2026
Critical9.4An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie.CVE-2026-50612 · QNAP Systems Inc. · QuMagie · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.5%Oct 15, 2026
High8.7An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station.CVE-2026-44084 · QNAP Systems Inc. · Video Station · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.4%Oct 15, 2026
High8.6A relative path traversal vulnerability has been reported to affect QuMagie.CVE-2026-41545 · QNAP Systems Inc. · QuMagie · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.5%Oct 15, 2026
Medium5.3An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central.CVE-2026-41541 · QNAP Systems Inc. · Qsync Central · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.5%Oct 15, 2026
Medium5.3A server-side request forgery (SSRF) vulnerability has been reported to affect Download Station.CVE-2026-39989 · QNAP Systems Inc. · Download Station · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.4%Oct 15, 2026
High8.7A path traversal vulnerability has been reported to affect Video Station.CVE-2026-34015 · QNAP Systems Inc. · Video Station · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.5%Oct 15, 2026
High8.4An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station.CVE-2026-34014 · QNAP Systems Inc. · Download Station · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.1%Oct 15, 2026
Critical9.3A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE.CVE-2026-34006 · QNAP Systems Inc. · sMedio DTCP MOVE · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.5%Oct 15, 2026
High7.1A SQL injection vulnerability has been reported to affect Video Station.CVE-2026-26245 · QNAP Systems Inc. · Video Station · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.4%Oct 15, 2026
High7.1A SQL injection vulnerability has been reported to affect Video Station.CVE-2026-26244 · QNAP Systems Inc. · Video Station · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.4%Oct 15, 2026
High7.2A path traversal vulnerability has been reported to affect Qsync Central.CVE-2026-26243 · QNAP Systems Inc. · Qsync Central · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.5%Oct 15, 2026
High8.7A path traversal vulnerability has been reported to affect QcalAgent.CVE-2026-41544 · QNAP Systems Inc. · QcalAgent · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.4%Oct 15, 2026
High8.7A relative path traversal vulnerability has been reported to affect Download Station.CVE-2026-39993 · QNAP Systems Inc. · Download Station · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.4%Oct 15, 2026
Medium5.3A NULL pointer dereference vulnerability has been reported to affect File Station 5.CVE-2026-24723 · QNAP Systems Inc. · File Station 5 · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.3%Oct 15, 2026
Medium5.3A NULL pointer dereference vulnerability has been reported to affect File Station 5.CVE-2026-24722 · QNAP Systems Inc. · File Station 5 · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.3%Oct 15, 2026
Medium5.3A NULL pointer dereference vulnerability has been reported to affect File Station 5.CVE-2026-24721 · QNAP Systems Inc. · File Station 5 · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.3%Oct 15, 2026