QNAP Systems

Exploited now

CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.

• 7.3HighFeb 3, 2021QNAP Systems Helpdesk Auth bypass / access controlCVE-2020-2506QNAP Helpdesk contains an improper access control vulnerability which could allow an attacker to gain privileges or to read sensitive information.Added to KEV Mar 25, 2022 · 414 days after publicationExploited2% likely

Recent

• 8.7HighOct 29, 2026QNAP Systems HBS 3 Hybrid Backup Sync Crypto / certificateCVE-2025-62841An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 26.4.0.521 and later Hybrid Backup Sync 26.4.0.521 and later Hybrid Backup Sync 26.4.1.563 and later
• 8.7HighOct 29, 2026QNAP Systems HBS 3 Hybrid Backup Sync Crypto / certificateCVE-2025-62839An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 26.4.0.521 and later Hybrid Backup Sync 26.4.0.521 and later Hybrid Backup Sync 26.4.1.563 and later
• 1.2LowJun 10, 2026QNAP Systems QTSCVE-2025-59382QTS, QuTS hero, QuTScloud are not affected. We have already fixed the vulnerability in the following version:
• 6.6MediumJun 9, 2026QNAP Systems QuMagie Auth bypass / access controlCVE-2026-26236A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions. We have already fixed the vulnerability in the following version: QuMagie 2.9.0 and later
• 0.9LowMar 20, 2026QNAP Systems QuRouterCVE-2025-62843An improper restriction of communication channel to intended endpoints vulnerability has been reported to affect QHora. If an attacker gains physical access, they can then exploit the vulnerability to gain the privileges that were intended for the original endpoint. We have already fixed the vulner
• 8.1HighMar 20, 2026QNAP Systems QuNetSwitch Code / command injectionCVE-2026-22897A command injection vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuNetSwitch 2.0.4.0415 and later1.1% likely
• 1.7LowFeb 11, 2026QNAP Systems Media Streaming add-on Memory corruptionCVE-2024-56807An out-of-bounds read vulnerability has been reported to affect Media Streaming add-on. If an attacker gains local network access, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following version: Media Streaming add-on 500.1.1.6 ( 2024
• 0.6LowFeb 11, 2026QNAP Systems Qsync CentralCVE-2025-30269A use of externally-controlled format string vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerability in the following version: Qsync Ce
• 0.6LowFeb 11, 2026QNAP Systems QuTS hero Memory corruptionCVE-2025-48725A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: QuTS hero h5.
• 3.6LowFeb 11, 2026QNAP Systems File Station 5 Denial of serviceCVE-2025-54155An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource
• 3.6LowFeb 11, 2026QNAP Systems File Station 5 Denial of serviceCVE-2025-54161An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource
• 1.2LowFeb 11, 2026QNAP Systems QTS Denial of serviceCVE-2025-58466A use of uninitialized variable vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to denial of service conditions, or modify control flow in unexpected ways. We have already
• 1.2LowJan 2, 2026QNAP Systems QTS Memory corruptionCVE-2025-52426A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the follow
• 1.3LowJan 2, 2026QNAP Systems QTS Memory corruptionCVE-2025-44013A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versio
• 7.3HighFeb 3, 2021QNAP Systems Helpdesk Auth bypass / access controlCVE-2020-2506QNAP Helpdesk contains an improper access control vulnerability which could allow an attacker to gain privileges or to read sensitive information.Exploited2% likely

See every QNAP Systems entry on the dashboard.

Top products

• QTS4 CVEs in the last year
• HBS 3 Hybrid Backup Sync2 CVEs in the last year
• File Station 52 CVEs in the last year
• QuTS hero1 CVE in the last year
• QuRouter1 CVE in the last year
• QuNetSwitch1 CVE in the last year
• QuMagie1 CVE in the last year
• Qsync Central1 CVE in the last year
• Media Streaming add-on1 CVE in the last year

Advisories

Official advisories from the last 90 days that name this vendor's CVEs.

• QNAP · Jun 16, 2026Vulnerabilities in QTS, QuTS hero, QuTS cloud, and QVP (QVR Pro appliances)CVE-2025-59382
• QNAP · Jun 16, 2026Vulnerabilities in QuMagie and License CenterCVE-2026-26236
• QNAP · Mar 20, 2026Multiple Vulnerabilities in QuNetSwitch (ADRA NDR)CVE-2026-22897
• QNAP · Mar 20, 2026Multiple Vulnerabilities in QuRouter (PWN2OWN 2025)CVE-2025-62843
• QNAP · Feb 11, 2026Multiple Vulnerabilities in Media Streaming add-onCVE-2024-56807
• QNAP · Feb 11, 2026Multiple Vulnerabilities in File Station 5CVE-2025-54155CVE-2025-54161
• QNAP · Feb 11, 2026Multiple Vulnerabilities in QTS and QuTS heroCVE-2025-58466
• QNAP · Feb 11, 2026Multiple Vulnerabilities in Qsync CentralCVE-2025-30269
• QNAP · Feb 11, 2026Multiple Vulnerabilities in QuTS heroCVE-2025-48725
• QNAP · Jan 2, 2026Multiple Vulnerabilities in QTS and QuTS heroCVE-2025-44013CVE-2025-52426