Exploited vulnerabilities
QNAP
11 QNAP vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue11
Last 12 months0
In ransomware campaigns9
Last addition21 December 2023
The vulnerabilities11
- 21 December 2023CVE-2023-47565VioStor NVRQNAP VioStor NVR OS Command Injection Vulnerability
- 8 September 2022CVE-2022-27593Photo StationQNAP Photo Station Externally Controlled Reference VulnerabilityRansomware
- 8 June 2022CVE-2019-7195Photo StationQNAP Photo Station Path Traversal VulnerabilityRansomware
- 8 June 2022CVE-2019-7194Photo StationQNAP Photo Station Path Traversal VulnerabilityRansomware
- 8 June 2022CVE-2019-7193QTSQNAP QTS Improper Input Validation VulnerabilityRansomware
- 8 June 2022CVE-2019-7192Photo StationQNAP Photo Station Improper Access Control VulnerabilityRansomware
- 24 May 2022CVE-2018-19953Network Attached Storage (NAS)QNAP NAS File Station Cross-Site Scripting VulnerabilityRansomware
- 24 May 2022CVE-2018-19949Network Attached Storage (NAS)QNAP NAS File Station Command Injection VulnerabilityRansomware
- 24 May 2022CVE-2018-19943Network Attached Storage (NAS)QNAP NAS File Station Cross-Site Scripting VulnerabilityRansomware
- 11 April 2022CVE-2020-2509QNAP Network-Attached Storage (NAS)QNAP Network-Attached Storage (NAS) Command Injection Vulnerability
- 31 March 2022CVE-2021-28799Network Attached Storage (NAS)QNAP NAS Improper Authorization VulnerabilityRansomware
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, QNAP included.