Threat database

CVE-2026-41544 is a path traversal vulnerability in QNAP Systems Inc.'s QcalAgent. A remote attacker with a user account can exploit this flaw to read files or system data that should be inaccessible. The vulnerability is fixed in QcalAgent version 1.1.10 and later.

CVE-2026-39993 is a relative path traversal vulnerability in QNAP Systems Inc.'s Download Station. An attacker with a user account can exploit this flaw to read unauthorized files or system data. The vulnerability has been fixed in Download Station versions 5.10.2.313 and later, and 5.11.3.322 and later.

CVE-2026-24723 is a NULL pointer dereference vulnerability in QNAP Systems Inc. File Station 5. A remote attacker with a user account can exploit this flaw to cause a denial-of-service (DoS) condition. The issue has been fixed in File Station 5 version 5.5.6.5243 and later.

CVE-2026-24722 is a NULL pointer dereference vulnerability in QNAP Systems Inc. File Station 5. A remote attacker with a user account can exploit this flaw to cause a denial-of-service (DoS) condition. The issue has been fixed in File Station 5 version 5.5.6.5243 and later.

CVE-2026-24721 is a NULL pointer dereference vulnerability in QNAP Systems Inc. File Station 5. A remote attacker with a user account can exploit this flaw to cause a denial-of-service (DoS) condition. The issue has been fixed in File Station 5 version 5.5.6.5243 and later.

CVE-2026-24718 is a path traversal vulnerability in QNAP Systems Inc.'s Qsync Central. A remote attacker with a user account can exploit this flaw to read unexpected files or system data. The vulnerability has been fixed in Qsync Central versions 5.0.0.7 and later, 5.1.0.3 and later, 5.2.0.5 and later, and 5.3.0.2 and later.

CVE-2026-24715 is a medium severity vulnerability in QNAP Systems Inc. QuRouter involving an observable timing discrepancy (CWE-208). This flaw could allow remote attackers to obtain sensitive data. The issue affects QuRouter versions from 2.7.0 up to but not including 2.7.2.113. The vulnerability has been fixed in QuRouter version 2.7.2.113 and later.

CVE-2026-22896 is a cross-site scripting (XSS) vulnerability in QNAP Systems Inc.'s Network & Virtual Switch. It requires an attacker to have an administrator account to exploit the vulnerability by injecting malicious code. The vulnerability has been fixed in specific versions of QTS, QuTS cloud, and QuTS hero as detailed by the vendor. The CVSS 4.0 base score is 6.2, indicating a medium severity level.

CVE-2025-68404 is a time-of-check time-of-use (TOCTOU) race condition vulnerability in QNAP Systems Inc.'s QuRouter product. This flaw could allow remote attackers to compromise system security. The vulnerability has been fixed in QuRouter version 2.6.4.001 and later.

CVE-2025-68403 is a medium severity vulnerability in QNAP Systems Inc. QuRouter that allows an attacker with local administrator access to modify system or configuration settings. The issue is classified as CWE-15 (External Control of System or Configuration Setting). The vulnerability affects QuRouter versions from 2.7.0 up to but not including 2.7.2.113. It has been fixed in version 2.7.2.113 and later.

CVE-2025-66275 is a path traversal vulnerability in QNAP Systems Inc.'s Video Station. An attacker with a user account can exploit this flaw to read unauthorized files or system data. The vulnerability is fixed in Video Station version 5.8.5 and later.

CVE-2025-66272 is a path traversal vulnerability in QNAP Systems Inc.'s Video Station. A remote attacker with a user account can exploit this flaw to read unauthorized files or system data. The issue is fixed in Video Station version 5.8.5 and later.

CVE-2025-29897 is a buffer copy vulnerability in QNAP Systems Inc.'s Qsync Central that allows a remote attacker with a user account to modify memory or crash processes. The issue is fixed in Qsync Central version 5.0.0.4 and later. The vulnerability has a low severity score and requires low privileges to exploit.

CVE-2025-29896 is a NULL pointer dereference vulnerability in QNAP Systems Inc.'s Qsync Central. A remote attacker with a user account can exploit this flaw to cause a denial-of-service (DoS) condition. The vulnerability has been fixed in Qsync Central version 5.0.0.4 and later. The CVSS 4.0 base score is 2.3, indicating low severity.

CVE-2025-29895 is a NULL pointer dereference vulnerability in QNAP Systems Inc.'s Qsync Central. A remote attacker with a user account can exploit this flaw to cause a denial-of-service (DoS) condition. The vulnerability is fixed in Qsync Central version 5.0.0.4 and later. The CVSS 4.0 base score is 2.3, indicating low severity.

An improper authentication vulnerability has been reported to affect product. The remote attackers can then exploit the vulnerability to compromise the security of the system. QTS is not affected. We have already fixed the vulnerability in the following version:

A cross-site scripting (XSS) vulnerability has been reported to affect QcalAgent. The local attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QcalAgent 1.1.9 and later

A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later

A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later

An incorrect authorization vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass intended access restrictions. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later