Advisories · Technology

QNAP Systems Inc. QuTScloud.

Every CVE that names QNAP Systems Inc. QuTScloud among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-59382 CVE record

CVSS 1.2 Low

QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- CWE-472
Not analysed yet 10 Jun 2026
CVE-2022-27600 CVE record

CVSS 6.8 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Denial of service
- Hard-coded credentials
Not analysed yet 19 Dec 2024
CVE-2023-34974 CVE record

CVSS 8.8 High

QTS, QuTS hero, QuTScloud, QVR, QES
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 6 Sept 2024
CVE-2024-32771 CVE record

CVSS 2.6 Low

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Authentication bypass
Not analysed yet 6 Sept 2024
CVE-2023-39298 CVE record

CVSS 7.8 High

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Broken access control
Not analysed yet 6 Sept 2024
CVE-2023-39300 CVE record

CVSS 7.2 High

QTS
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 6 Sept 2024
CVE-2023-51364 CVE record

CVSS 8.7 HighCritical · CVSS 7+ and EPSS

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Path traversal
Not analysed yet 26 Apr 2024
CVE-2023-51365 CVE record

CVSS 8.7 HighCritical · CVSS 7+ and EPSS

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Path traversal
Not analysed yet 26 Apr 2024
CVE-2024-21905 CVE record

CVSS 6.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 26 Apr 2024
CVE-2024-27124 CVE record

CVSS 7.5 High

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 26 Apr 2024
CVE-2024-32766 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 26 Apr 2024
CVE-2024-21900 CVE record

CVSS 4.3 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Other injection
Not analysed yet 8 Mar 2024
CVE-2024-21899 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Authentication bypass
Not analysed yet 8 Mar 2024
CVE-2023-32969 CVE record

CVSS 4.9 Medium

Network & Virtual Switch
- QNAP Systems Inc. QuTScloud
- QNAP Systems Inc. QTS
- Cross-site scripting (XSS)
Not analysed yet 8 Mar 2024
CVE-2023-50358 CVE record

CVSS 5.8 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 13 Feb 2024
CVE-2023-47218 CVE record

CVSS 5.8 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 13 Feb 2024
CVE-2023-47568 CVE record

CVSS 8.8 High

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- SQL injection
Not analysed yet 2 Feb 2024
CVE-2023-47567 CVE record

CVSS 4.7 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 2 Feb 2024
CVE-2023-47566 CVE record

CVSS 6.7 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 2 Feb 2024
CVE-2023-45037 CVE record

CVSS 3.8 Low

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 2 Feb 2024
CVE-2023-45036 CVE record

CVSS 3.8 Low

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 2 Feb 2024
CVE-2023-45035 CVE record

CVSS 3.8 Low

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 2 Feb 2024
CVE-2023-45028 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Denial of service
Not analysed yet 2 Feb 2024
CVE-2023-45027 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Path traversal
Not analysed yet 2 Feb 2024
CVE-2023-45026 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Path traversal
Not analysed yet 2 Feb 2024
CVE-2023-45025 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 2 Feb 2024
CVE-2023-41292 CVE record

CVSS 3.8 Low

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 2 Feb 2024
CVE-2023-41283 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 2 Feb 2024
CVE-2023-41282 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 2 Feb 2024
CVE-2023-41281 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 2 Feb 2024
CVE-2023-41280 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 2 Feb 2024
CVE-2023-41279 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 2 Feb 2024
CVE-2023-41278 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 2 Feb 2024
CVE-2023-41277 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 2 Feb 2024
CVE-2023-41276 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 2 Feb 2024
CVE-2023-41275 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 2 Feb 2024
CVE-2023-41274 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 2 Feb 2024
CVE-2023-41273 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 2 Feb 2024
CVE-2023-39303 CVE record

CVSS 5.3 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Authentication bypass
Not analysed yet 2 Feb 2024
CVE-2023-39297 CVE record

CVSS 8.8 High

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 2 Feb 2024
CVE-2023-39302 CVE record

CVSS 6.6 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 2 Feb 2024
CVE-2023-32967 CVE record

CVSS 5.0 Medium

QTS, QuTScloud
- QNAP Systems Inc. QuTScloud
- QNAP Systems Inc. QTS
- Broken access control
Not analysed yet 2 Feb 2024
CVE-2023-23367 CVE record

CVSS 4.7 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 10 Nov 2023
CVE-2023-39301 CVE record

CVSS 4.3 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Server-side request forgery (SSRF)
Not analysed yet 3 Nov 2023
CVE-2023-23368 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 3 Nov 2023
CVE-2023-34975 CVE record

CVSS 6.6 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QuTS hero
- QNAP Systems Inc. QTS
- Command injection
Not analysed yet 13 Oct 2023
CVE-2023-32974 CVE record

CVSS 7.5 High

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Path traversal
Not analysed yet 13 Oct 2023
CVE-2023-32973 CVE record

CVSS 3.8 Low

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 13 Oct 2023
CVE-2023-32970 CVE record

CVSS 4.9 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QuTS hero
- QNAP Systems Inc. QuTScloud
- Memory corruption
Not analysed yet 13 Oct 2023
CVE-2023-32972 CVE record

CVSS 3.8 Low

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 6 Oct 2023
CVE-2023-32971 CVE record

CVSS 3.8 Low

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 6 Oct 2023
CVE-2023-23362 CVE record

CVSS 8.8 High

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 22 Sept 2023
CVE-2023-23355 CVE record

CVSS 6.6 Medium

QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances), QVR
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 29 Mar 2023
CVE-2021-44054 CVE record

CVSS 4.3 Medium

Open redirect
- QNAP Systems Inc. QuTScloud
- QNAP Systems Inc. QuTS hero
- Open redirect
Not analysed yet 5 May 2022
CVE-2021-44053 CVE record

CVSS 5.7 Medium

Reflected XSS
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Cross-site scripting (XSS)
Not analysed yet 5 May 2022
CVE-2021-44052 CVE record

CVSS 6.5 Medium

Arbitrary file read
- QNAP Systems Inc. QuTScloud
- QNAP Systems Inc. QuTS hero
- Path traversal
Not analysed yet 5 May 2022
CVE-2021-44051 CVE record

CVSS 8.8 High

Command injection
- QNAP Systems Inc. QuTScloud
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 5 May 2022
CVE-2021-38693 CVE record

CVSS 5.3 Medium

Path Traversal in thttpd
- QNAP Systems Inc. QuTScloud
- QNAP Systems Inc. QuTS hero
- Path traversal
Not analysed yet 5 May 2022
CVE-2021-38674 CVE record

CVSS 4.2 Medium

Reflected XSS Vulnerability in TFTP
- QNAP Systems Inc. QuTS hero
- QNAP Systems Inc. QTS
- Cross-site scripting (XSS)
Not analysed yet 7 Jan 2022
CVE-2021-34343 CVE record

CVSS 6.0 Medium

Buffer Overflow Vulnerability in QTS, QuTS hero, and QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTScloud
- Memory corruption
Not analysed yet 10 Sept 2021