# QNAP Systems Inc. QTS.

Every CVE that names QNAP Systems Inc. QTS among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [QTS](https://agentprime.io/advisories/CVE-2024-38639.md)
  `CVE-2024-38639` · CVE record: QNAP Systems Inc. QTS · CVSS 4.8 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Authentication bypass
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2026-24719.md)
  `CVE-2026-24719` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 6.1 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: Command injection
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2026-24717.md)
  `CVE-2026-24717` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 1.2 Low · Not analysed yet · Published 10 Jun 2026 · Tags: Path traversal
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2026-24716.md)
  `CVE-2026-24716` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 1.2 Low · Not analysed yet · Published 10 Jun 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2026-22893.md)
  `CVE-2026-22893` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 8.6 High · Not analysed yet · Published 10 Jun 2026 · Tags: Command injection
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-66281.md)
  `CVE-2025-66281` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-66280.md)
  `CVE-2025-66280` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-66279.md)
  `CVE-2025-66279` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 8.6 High · Not analysed yet · Published 10 Jun 2026 · Tags: Command injection
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-66273.md)
  `CVE-2025-66273` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 8.6 High · Not analysed yet · Published 10 Jun 2026 · Tags: Command injection
- [NULL Pointer Dereference in networkRequest.cgi](https://agentprime.io/advisories/CVE-2025-62850.md)
  `CVE-2025-62850` · CVE record: QNAP Systems Inc. QTS and 3 more · CVSS 5.1 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: Memory corruption
- [QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)](https://agentprime.io/advisories/CVE-2025-59382.md)
  `CVE-2025-59382` · CVE record: QNAP Systems Inc. QTS and 2 more · CVSS 1.2 Low · Not analysed yet · Published 10 Jun 2026 · Tags: CWE-472
- [QTS](https://agentprime.io/advisories/CVE-2025-66276.md)
  `CVE-2025-66276` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jun 2026
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-62858.md)
  `CVE-2025-62858` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2026-41539.md)
  `CVE-2026-41539` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Cross-site scripting (XSS)
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2024-14026.md)
  `CVE-2024-14026` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 2.0 Low · Not analysed yet · Published 11 Mar 2026 · Tags: Command injection
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-47205.md)
  `CVE-2025-47205` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 11 Feb 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-58466.md)
  `CVE-2025-58466` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 1.2 Low · Not analysed yet · Published 11 Feb 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-66274.md)
  `CVE-2025-66274` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 11 Feb 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-66277.md)
  `CVE-2025-66277` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Feb 2026 · Tags: Path traversal
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-62852.md)
  `CVE-2025-62852` · CVE record: QNAP Systems Inc. QTS · CVSS 1.2 Low · Not analysed yet · Published 2 Jan 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-59381.md)
  `CVE-2025-59381` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 2 Jan 2026 · Tags: Path traversal
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-59380.md)
  `CVE-2025-59380` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 4.6 Medium · Not analysed yet · Published 2 Jan 2026 · Tags: Path traversal
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-48721.md)
  `CVE-2025-48721` · CVE record: QNAP Systems Inc. QTS · CVSS 1.2 Low · Not analysed yet · Published 2 Jan 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-9110.md)
  `CVE-2025-9110` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 2.7 Low · Not analysed yet · Published 2 Jan 2026 · Tags: Information disclosure
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-57705.md)
  `CVE-2025-57705` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 4.6 Medium · Not analysed yet · Published 2 Jan 2026 · Tags: Denial of service
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-54166.md)
  `CVE-2025-54166` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 4.6 Medium · Not analysed yet · Published 2 Jan 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-54165.md)
  `CVE-2025-54165` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 4.6 Medium · Not analysed yet · Published 2 Jan 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-54164.md)
  `CVE-2025-54164` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 4.6 Medium · Not analysed yet · Published 2 Jan 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-53596.md)
  `CVE-2025-53596` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 1.2 Low · Not analysed yet · Published 2 Jan 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-53593.md)
  `CVE-2025-53593` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 1.2 Low · Not analysed yet · Published 2 Jan 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-53592.md)
  `CVE-2025-53592` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 1.3 Low · Not analysed yet · Published 2 Jan 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-53591.md)
  `CVE-2025-53591` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 1.2 Low · Not analysed yet · Published 2 Jan 2026 · Tags: Memory corruption
- [QTS](https://agentprime.io/advisories/CVE-2025-53590.md)
  `CVE-2025-53590` · CVE record: QNAP Systems Inc. QTS · CVSS 1.2 Low · Not analysed yet · Published 2 Jan 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-53589.md)
  `CVE-2025-53589` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 1.2 Low · Not analysed yet · Published 2 Jan 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-53414.md)
  `CVE-2025-53414` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 1.2 Low · Not analysed yet · Published 2 Jan 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-53405.md)
  `CVE-2025-53405` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 1.2 Low · Not analysed yet · Published 2 Jan 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-52872.md)
  `CVE-2025-52872` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 1.3 Low · Not analysed yet · Published 2 Jan 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-52864.md)
  `CVE-2025-52864` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 1.3 Low · Not analysed yet · Published 2 Jan 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-52863.md)
  `CVE-2025-52863` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 1.3 Low · Not analysed yet · Published 2 Jan 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-52431.md)
  `CVE-2025-52431` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 1.2 Low · Not analysed yet · Published 2 Jan 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-52430.md)
  `CVE-2025-52430` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 1.2 Low · Not analysed yet · Published 2 Jan 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-52426.md)
  `CVE-2025-52426` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 1.2 Low · Not analysed yet · Published 2 Jan 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-47208.md)
  `CVE-2025-47208` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 2 Jan 2026 · Tags: Denial of service
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-44013.md)
  `CVE-2025-44013` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 1.3 Low · Not analysed yet · Published 2 Jan 2026 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-59385.md)
  `CVE-2025-59385` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 8.1 High · Not analysed yet · Published 16 Dec 2025 · Tags: Authentication bypass
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-62847.md)
  `CVE-2025-62847` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 6.6 Medium · Not analysed yet · Published 16 Dec 2025 · Tags: Command injection
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-62848.md)
  `CVE-2025-62848` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 8.1 High · Not analysed yet · Published 16 Dec 2025 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-62849.md)
  `CVE-2025-62849` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 5.2 Medium · Not analysed yet · Published 16 Dec 2025 · Tags: SQL injection
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-53407.md)
  `CVE-2025-53407` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-53406.md)
  `CVE-2025-53406` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-52866.md)
  `CVE-2025-52866` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-52862.md)
  `CVE-2025-52862` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-52860.md)
  `CVE-2025-52860` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-52859.md)
  `CVE-2025-52859` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-52858.md)
  `CVE-2025-52858` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-52857.md)
  `CVE-2025-52857` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-52855.md)
  `CVE-2025-52855` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-52854.md)
  `CVE-2025-52854` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-52853.md)
  `CVE-2025-52853` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Memory corruption
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-52433.md)
  `CVE-2025-52433` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Memory corruption

Older: <https://agentprime.io/advisories/technology/qnap-systems-inc-qts.md?cursor=WyIyMDI1LTEwLTAzVDE4OjExOjM2Ljc1ODAwMFoiLCJDVkUtMjAyNS01MjQzMyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=qnap-systems-inc-qts>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/qnap-systems-inc-qts/>. Everything for agents: <https://agentprime.io/llms.txt>.