QNAP known exploited vulnerabilities
The Beam CVE database tracks 11 known exploited vulnerabilities for QNAP: 8 critical, 1 high and 2 medium severity. The newest is CVE-2023-47565, published Dec 8, 2023.
These are the QNAP vulnerabilities in CISA’s Known Exploited Vulnerabilities catalog: flaws with confirmed exploitation in the wild. Each entry links the vendor bulletin and CISA’s required action.
- Vulnerabilities tracked
- 11
- Critical
- 8
- Known exploited (CISA KEV)
- 11
- Published in the last 30 days
- 0
All entries, newest first
CVE-2023-47565
QNAP VioStor NVR OS Command Injection Vulnerability
high8.8ExploitedDec 8, 2023CVE-2022-27593
QNAP Photo Station Externally Controlled Reference Vulnerability
critical9.1ExploitedSep 8, 2022CVE-2021-28799
QNAP NAS Improper Authorization Vulnerability
critical9.8ExploitedMay 13, 2021CVE-2020-2509
QNAP Network-Attached Storage (NAS) Command Injection Vulnerability
critical9.8ExploitedApr 17, 2021CVE-2018-19943
QNAP NAS File Station Cross-Site Scripting Vulnerability
medium5.4ExploitedOct 28, 2020CVE-2018-19949
QNAP NAS File Station Command Injection Vulnerability
critical9.8ExploitedOct 28, 2020CVE-2018-19953
QNAP NAS File Station Cross-Site Scripting Vulnerability
medium6.1ExploitedOct 28, 2020CVE-2019-7192
QNAP Photo Station Improper Access Control Vulnerability
critical9.8ExploitedDec 5, 2019CVE-2019-7193
QNAP QTS Improper Input Validation Vulnerability
critical9.8ExploitedDec 5, 2019CVE-2019-7194
QNAP Photo Station Path Traversal Vulnerability
critical9.8ExploitedDec 5, 2019CVE-2019-7195
QNAP Photo Station Path Traversal Vulnerability
critical9.8ExploitedDec 5, 2019
