QNAP known exploited vulnerabilities
CISA's Known Exploited Vulnerabilities catalog lists 11 QNAP vulnerabilities: 0 added in the last 365 days, 8 rated critical (CVSS 9 or higher), and 9 with known ransomware use. The most recent was added Dec 21, 2023.
RSS feed for QNAP exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant
| Added to KEV | CVE | Vulnerability | CVSS | EPSS | Federal due date | Ransomware use |
|---|---|---|---|---|---|---|
| 2023-12-21 | CVE-2023-47565 | QNAP VioStor NVR OS Command Injection Vulnerability | 8 (v3.1) | 73.3% | 2024-01-11 | Unknown |
| 2022-09-08 | CVE-2022-27593 | QNAP Photo Station Externally Controlled Reference Vulnerability | 10 (v3.1) | 87.9% | 2022-09-29 | Known |
| 2022-06-08 | CVE-2019-7192 | QNAP Photo Station Improper Access Control Vulnerability | 9.8 (v3.1) | 88.1% | 2022-06-22 | Known |
| 2022-06-08 | CVE-2019-7193 | QNAP QTS Improper Input Validation Vulnerability | 9.8 (v3.1) | 14.4% | 2022-06-22 | Known |
| 2022-06-08 | CVE-2019-7194 | QNAP Photo Station Path Traversal Vulnerability | 9.8 (v3.1) | 82.7% | 2022-06-22 | Known |
| 2022-06-08 | CVE-2019-7195 | QNAP Photo Station Path Traversal Vulnerability | 9.8 (v3.1) | 89.7% | 2022-06-22 | Known |
| 2022-05-24 | CVE-2018-19943 | QNAP NAS File Station Cross-Site Scripting Vulnerability | 8 (v3.1) | 22.7% | 2022-06-14 | Known |
| 2022-05-24 | CVE-2018-19949 | QNAP NAS File Station Command Injection Vulnerability | 9.8 (v3.1) | 30.2% | 2022-06-14 | Known |
| 2022-05-24 | CVE-2018-19953 | QNAP NAS File Station Cross-Site Scripting Vulnerability | 6.1 (v3.1) | 30.5% | 2022-06-14 | Known |
| 2022-04-11 | CVE-2020-2509 | QNAP Network-Attached Storage (NAS) Command Injection Vulnerability | 9.8 (v3.1) | 34.0% | 2022-05-02 | Unknown |
| 2022-03-31 | CVE-2021-28799 | QNAP NAS Improper Authorization Vulnerability | 10 (v3.1) | 78.3% | 2022-04-21 | Known |