Advisories · Technology

QNAP Systems Inc. Media Streaming Add-on.

Every CVE that names QNAP Systems Inc. Media Streaming Add-on among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-59383 CVE record

CVSS 2.7 Low

Media Streaming Add-on
- QNAP Systems Inc. Media Streaming Add-on
- Memory corruption
Not analysed yet 20 Mar 2026
CVE-2024-56807 CVE record

CVSS 1.7 Low

Media Streaming add-on
- QNAP Systems Inc. Media Streaming add-on
- Memory corruption
Not analysed yet 11 Feb 2026
CVE-2024-56808 CVE record

CVSS 2.0 Low

Media Streaming add-on
- QNAP Systems Inc. Media Streaming add-on
- Command injection
Not analysed yet 11 Feb 2026
CVE-2024-50395 CVE record

CVSS 6.9 Medium

Media Streaming add-on
- QNAP Systems Inc. Media Streaming add-on
- Broken access control
Not analysed yet 22 Nov 2024
CVE-2023-47220 CVE record

CVSS 6.6 Medium

Media Streaming add-on
- QNAP Systems Inc. Media Streaming add-on
- Command injection
Not analysed yet 3 May 2024
CVE-2023-47222 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Media Streaming add-on
- QNAP Systems Inc. Media Streaming add-on
- Path traversal
- Information disclosure
Not analysed yet 26 Apr 2024
CVE-2023-23369 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

QTS, Multimedia Console, and Media Streaming add-on
- QNAP Systems Inc. Multimedia Console
- QNAP Systems Inc. QTS
- Command injection
Not analysed yet 3 Nov 2023
CVE-2021-34362 CVE record

CVSS 8.7 High

Command Injection Vulnerability in Media Streaming Add-on
- QNAP Systems Inc. Media Streaming add-on
- Command injection
Not analysed yet 22 Oct 2021
CVE-2020-36195 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

SQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-On
- QNAP Systems Inc. QTS
- QNAP Systems Inc. Media Streaming add-on
- SQL injection
- Other injection
Not analysed yet 17 Apr 2021