QNAP vulnerabilities
We track 252 vulnerabilities in QNAP products across 60+ products. 250 are rated high or critical, and 14 have been exploited in real attacks. The most recent was published on October 29, 2026.
Latest QNAP vulnerabilities
- 8.4 High severity
HybridDesk Station: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability has been reported to affect HybridDesk Station. If an attacker gains local network access, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version
- 8.8 High severity
Qsync Central: Improper Certificate Validation
An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in
- 8.8 High severity
Qsync Central: Improper Certificate Validation
An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in
- 8.1 High severity
QTS: Out-of-bounds Write
An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in
- 8.8 High severity
QTS: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in t
- 8.8 High severity
Qsync Central: Improper Neutralization of Special Elements used in an SQL Command
An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following vers
- 8.8 High severity
Qsync Central: Improper Neutralization of Special Elements used in an SQL Command
An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following vers
- 7.2 High severity
QuRouter: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability has been reported to affect QuRouter 2.5.1. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following v
- 8.1 High severity
File Station 5: Out-of-bounds Write
An out-of-bounds write vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in the following version: F
- 8.8 High severity
File Station 5: Improper Certificate Validation
An improper certificate validation vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in
- 8.8 High severity
File Station 5: Improper Certificate Validation
An improper certificate validation vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in
- 8.8 High severity
Qsync Central: Improper Neutralization of Special Elements used in an SQL Command
An SQL injection vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to execute unauthorized code or commands. We have already fixed the vulnerability in the followin
- 8.8 High severity
File Station 5: Improper Certificate Validation
An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers who have gained user access to compromise the security of the system. We have already fixed the vulnerabil
- 8.8 High severity
File Station 5: Improper Certificate Validation
An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers who have gained user access to compromise the security of the system. We have already fixed the vulnerabil
- 8.8 High severity
File Station 5: Improper Certificate Validation
An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers who have gained user access to compromise the security of the system. We have already fixed the vulnerabil
- 7.5 High severity
File Station 5: NULL Pointer Dereference
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the f
- 7.5 High severity
File Station 5: NULL Pointer Dereference
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the f
- 7.5 High severity
File Station 5: NULL Pointer Dereference
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the f
- 7.5 High severity
File Station 5: Allocation of Resources Without Limits or Throttling
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from acces
- 7.5 High severity
File Station 5: NULL Pointer Dereference
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the f
- 8.8 High severity
File Station 5: Improper Certificate Validation
An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers who have gained user access to compromise the security of the system. We have already fixed the vulnerabil
- 7.1 High severity
File Station 5: Allocation of Resources Without Limits or Throttling
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from acces
- 8.1 High severity
Qsync Central: Use of Externally-Controlled Format String
A use of externally-controlled format string vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to obtain secret data or modify memory. We have already fixed the vul
- 8.8 High severity
QTS: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to execute arbitrary commands. We have already fixed the vulnerabilit
- 7.8 High severity
QuRouter: Improper Authentication
An improper authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following ve
- 7.2 High severity
QuRouter: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following versi
- 7.2 High severity
QTS: Out-of-bounds Write
An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory. We have already fixed the vu
- 7.2 High severity
QTS: Out-of-bounds Write
An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory. We have already fixed the vu
- 9.1 Critical severity
HBS 3 Hybrid Backup Sync: Buffer Copy without Checking Size of Input
A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify memory or crash processes. We have already fixed the vulnerability in the following version: HBS 3 Hybr
- 8.6 High severity
QVPN Device Client for Mac: Time-of-check Time-of-use (TOCTOU) Race Condition
A time-of-check time-of-use (TOCTOU) race condition vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow local attackers who have gained user access to gain access to otherwise unauthorized resources.
- 7.1 High severity
QTS: Improper Neutralization of CRLF Sequences
An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to modify application dat
- 8.8 High severity
Helpdesk: Improper Certificate Validation
An improper certificate validation vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: Help
- 9.8 Critical severity
QuRouter: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuRouter 2.4.5.032 and later
- 9.1 Critical severity
File Station 5: Files or Directories Accessible to External Parties
A files or directories accessible to external parties vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers to read/write files or directories. We have already fixed the vulnerability in the foll
- 7.2 High severity
QTS: Out-of-bounds Write
An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory. QTS 5.2.x/QuTS hero h5.2.x a
- 7.5 High severity
QTS: Exposure of Sensitive Information to an Unauthorized Actor
An exposure of sensitive information vulnerability has been reported to affect product. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QTS
- 7.2 High severity
QuFirewall: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vul
- 8.7 High severity
QuLog Center: Improper Neutralization of Input During Web Page Generation
A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to bypass security mechanisms or read application data. We h
- 7.5 High severity
QTS: Uncontrolled Resource Consumption
An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to launch a denial-of-service (DoS) attack. We have already fixed the vulnerabil
- 7.8 High severity
QVPN Windows: Uncontrolled Search Path Element
An insecure library loading vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local attackers who have gained user access to execute unauthorized code or commands. We have already fixed the vulnerability