Vendor
QNAP vulnerabilities under active attack
11 QNAP vulnerabilities have confirmed evidence of exploitation in the wild, and 9 are used in ransomware campaigns.
11
confirmed exploited
9
used in ransomware
11
past fix deadline
- CVE-2023-47565 QNAP VioStor NVR OS Command Injection Vulnerability QNAP · VioStor NVR
- CVE-2022-27593 QNAP Photo Station Externally Controlled Reference Vulnerability QNAP · Photo Station
- CVE-2019-7195 QNAP Photo Station Path Traversal Vulnerability QNAP · Photo Station
- CVE-2019-7194 QNAP Photo Station Path Traversal Vulnerability QNAP · Photo Station
- CVE-2019-7193 QNAP QTS Improper Input Validation Vulnerability QNAP · QTS
- CVE-2019-7192 QNAP Photo Station Improper Access Control Vulnerability QNAP · Photo Station
- CVE-2018-19953 QNAP NAS File Station Cross-Site Scripting Vulnerability QNAP · Network Attached Storage (NAS)
- CVE-2018-19949 QNAP NAS File Station Command Injection Vulnerability QNAP · Network Attached Storage (NAS)
- CVE-2018-19943 QNAP NAS File Station Cross-Site Scripting Vulnerability QNAP · Network Attached Storage (NAS)
- CVE-2020-2509 QNAP Network-Attached Storage (NAS) Command Injection Vulnerability QNAP · QNAP Network-Attached Storage (NAS)
- CVE-2021-28799 QNAP NAS Improper Authorization Vulnerability QNAP · Network Attached Storage (NAS)