QNAP vulnerabilities
We track 252 vulnerabilities in QNAP products across 60+ products. 250 are rated high or critical, and 14 have been exploited in real attacks. The most recent was published on October 29, 2026.
Latest QNAP vulnerabilities
- 8.8 High severity
QTS: Improper Link Resolution Before File Access
A link following vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the file system to unintended locations. We have already fix
- 8.8 High severity
Qsync Central: Improper Link Resolution Before File Access
A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the file system to unintended locations. We have already fixed the vulnerability in t
- 7.2 High severity
QTS: Use of Externally-Controlled Format String
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify mem
- 7.2 High severity
QTS: Use of Externally-Controlled Format String
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify mem
- 9.8 Critical severity
QTS: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following versions:
- 9.8 Critical severity
QuRouter: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to inject malicious code. We have already fixed the vulnerability in the following version: QuRouter 2.4.5.032 and later
- 9.8 Critical severity
HBS 3 Hybrid Backup Sync: Improper Neutralization of Special Elements used in a Command
An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to execute commands. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup
- 9.8 Critical severity
SMB Service: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to inject malicious code. We have already fixed the vulnerability in the following version: SMB Servi
- 7.5 High severity
QTS: Improper Neutralization of CRLF Sequences
An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to modify application data. We have already fixed the
- 7.5 High severity
QTS: Improper Neutralization of CRLF Sequences
An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to modify application data. We have already fixed the
- 7.5 High severity
QTS: Improper Certificate Validation
An improper certificate validation vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow attackers with local network access to compromise the security of the system. We have already fixed
- 9.8 Critical severity
License Center: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability has been reported to affect License Center. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: License Center 1.9.43 an
- 9.1 Critical severity
QTS: Improper Authentication
An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the f
- 7.2 High severity
QTS: Use of Externally-Controlled Format String
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify mem
- 7.2 High severity
QTS: Use of Externally-Controlled Format String
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify mem
- 7.2 High severity
QTS: Use of Externally-Controlled Format String
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify mem
- 7.2 High severity
QTS: Use of Externally-Controlled Format String
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify mem
- 8.8 High severity
QTS: Use of Externally-Controlled Format String
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to obtain secret data or modify memory. We h
- 8.8 High severity
QTS: Use of Externally-Controlled Format String
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to obtain secret data or modify memory. We have already fixed the vulner
- 8.8 High severity
Media Streaming add-on: Authorization Bypass Through User-Controlled Key
An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow local network attackers to gain privilege. We have already fixed the vulnerability in the followin
- 9.8 Critical severity
QuLog Center: Improper Link Resolution Before File Access
A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers to traverse the file system to unintended locations and read or overwrite the contents of unexpected files. We have already fi
- 7.8 High severity
QuRouter: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow local network attackers to execute commands. We have already fixed the vulnerability in the following versions: QuRouter 2.4
- 9.8 Critical severity
QuRouter: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow remote attackers to execute commands. We have already fixed the vulnerability in the following version: QuRouter 2.4.3.103 a
- 7.5 High severity
QNAP AI Core: Exposure of Sensitive Information to an Unauthorized Actor
An exposure of sensitive information vulnerability has been reported to affect QNAP AI Core. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version
- 8.8 High severity
Notes Station 3: Improper Neutralization of Special Elements used in a Command
An OS command injection vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote authenticated attackers to execute commands. We have already fixed the vulnerability in the following version: Notes Station 3
- 9.8 Critical severity
Notes Station 3: Missing Authentication for Critical Functionality
A missing authentication for critical function vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote attackers to gain access to and execute certain functions. We have already fixed the vulnerability in t
- 7.2 High severity
QTS: Buffer Copy without Checking Size of Input
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fi
- 7.2 High severity
QTS: Buffer Copy without Checking Size of Input
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fi
- 7.8 High severity
QuMagie: Improper Certificate Validation
An improper certificate validation vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow local network users to compromise the security of the system via unspecified vectors. We have already fixed the vulnerability in t
- 7.8 High severity
QTS: Improper Neutralization of Special Elements used in a Command
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local network users to execute commands via unspecified vectors. We have already fixed the vulnerability in th
- 8.8 High severity
QTS: Buffer Copy without Checking Size of Input
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerabilit
- 8.8 High severity
QTS: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the followin
- 8.8 High severity
QTS: Buffer Copy without Checking Size of Input
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network. We have already fixed the vulnerability in the follo
- 8.8 High severity
Video Station: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: Video Station 5.8
- 8.8 High severity
Video Station: Improper Neutralization of Special Elements used in a Command
An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: Video Station
- 8.8 High severity
Music Station: Improper Authentication
An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Musi
- 7.2 High severity
QTS: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability has been reported to affect legacy QTS. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 4.3
- 7.8 High severity
QTS: Missing Authorization
A missing authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local authenticated users to access data or perform actions that they should not be allowed to perform via uns
- 7.2 High severity
QTS: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the
- 8.8 High severity
QTS: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. QuTScloud, QVR, QES are not affected. We have already fixed the vulne