Advisories · Technology

OSNEXUS QuantaStor.

Every CVE that names OSNEXUS QuantaStor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-18265 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability
- OSNEXUS QuantaStor
- Authentication bypass
Not analysed yet 20 Aug 2026
CVE-2026-10880 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Unauthenticated SQL Injection in Osnexus Quantastor
- Osnexus QuantaStor
- SQL injection
Not analysed yet 4 Jun 2026
CVE-2021-4406 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Authenticated Remote COmmand Execution as root in OSNEXUS QuantaStor version 6.0.0.355 and others
- OSNEXUS QuantaStor
- Command injection
Not analysed yet 10 Jul 2023
CVE-2021-42081 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Authenticated Remote Command Execution vulnerability in OSNEXUS QuantaStor before 6.0.0.355
- OSNEXUS QuantaStor
- Command injection
Not analysed yet 10 Jul 2023
CVE-2021-42079 CVE record

CVSS 6.2 Medium

SSRF vulnerability in OSNEXUS QuantaStor before 6.0.0.355
- OSNEXUS QuantaStor
- Server-side request forgery (SSRF)
Not analysed yet 10 Jul 2023
CVE-2021-42080 CVE record

CVSS 7.4 High

Reflected XSS vulnerability in OSNEXUS QuantaStor before 6.0.0.355
- OSNEXUS QuantaStor
- Cross-site scripting (XSS)
Not analysed yet 10 Jul 2023
CVE-2021-42082 CVE record

CVSS 7.8 High

Local Privilege Escalation to root in OSNEXUS QuantaStor before 6.0.0.355
- OSNEXUS QuantaStor
- Privilege escalation
Not analysed yet 10 Jul 2023
CVE-2021-42083 CVE record

CVSS 8.7 High

Authenticated Stored XSS in OSNEXUS QuantaStor 6.0.0.335
- OSNEXUS QuantaStor
- Cross-site scripting (XSS)
Not analysed yet 10 Jul 2023