QNAP Systems Inc. — Vulnerabilities & Security Advisories 558

Browse all 558 CVE security advisories affecting QNAP Systems Inc.. AI-powered Chinese analysis, POCs, and references for each vulnerability.

QNAP Systems Inc. manufactures network-attached storage devices and enterprise storage solutions, primarily serving small to medium-sized businesses and home users seeking centralized data management. Historically, the company’s firmware has exhibited a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from insufficient input validation and improper access controls within the web management interface or embedded services. Notable incidents involve critical RCE vulnerabilities that allow unauthenticated attackers to gain full system control, exposing connected data to theft or ransomware encryption. The sheer number of recorded CVEs highlights persistent challenges in secure coding practices and rigorous patch management across its diverse product line. While QNAP provides security updates, the frequency of disclosed flaws necessitates strict network segmentation and proactive monitoring for administrators relying on these storage appliances for critical infrastructure.

Found 55 results / 558 Clear Filters

Top products by QNAP Systems Inc.: QTS Qsync Central File Station 5 Photo Station QuMagie QuRouter Video Station QuTS hero Helpdesk Music Station QuLog Center QVR Notes Station 3 QuTScloud License Center Media Streaming add-on QVR Elite HBS 3 Hybrid Backup Sync QuNetSwitch QES Multimedia Console QcalAgent Download Station QuFirewall QVPN Windows Proxy Server Surveillance Station myQNAPcloud Link Malware Remover HBS 3

CVEs 558

CVE ID	Title	CVSS	Severity	Published
CVE-2025-29890	File Station 5 — File Station 5 CWE-770	5.0	-	2025-08-29
CVE-2025-29889	File Station 5 — File Station 5 CWE-476	7.5	-	2025-08-29
CVE-2025-29888	File Station 5 — File Station 5 CWE-476	7.5	-	2025-08-29
CVE-2025-29886	File Station 5 — File Station 5 CWE-476	7.5	-	2025-08-29
CVE-2025-29879	File Station 5 — File Station 5 CWE-476	7.5	-	2025-08-29
CVE-2025-29878	File Station 5 — File Station 5 CWE-476	7.5	-	2025-08-29
CVE-2025-29875	File Station 5 — File Station 5 CWE-476	7.5	-	2025-08-29
CVE-2025-29874	File Station 5 — File Station 5 CWE-476	7.5	-	2025-08-29
CVE-2025-29901	File Station 5 — File Station 5 CWE-476	7.5^AI	High ^AI	2025-08-26
CVE-2025-47206	File Station 5 — File Station 5 CWE-787	9.1^AI	Critical ^AI	2025-08-18
CVE-2025-29885	File Station 5 — File Station 5 CWE-295	8.8^AI	High ^AI	2025-06-06
CVE-2025-29884	File Station 5 — File Station 5 CWE-295	8.8^AI	High ^AI	2025-06-06
CVE-2025-29883	File Station 5 — File Station 5 CWE-295	8.8^AI	High ^AI	2025-06-06
CVE-2025-22486	File Station 5 — File Station 5 CWE-295	8.8^AI	High ^AI	2025-06-06
CVE-2025-22484	File Station 5 — File Station 5 CWE-770	5.0^AI	Medium ^AI	2025-06-06
CVE-2025-22490	File Station 5 — File Station 5 CWE-476	7.5^AI	High ^AI	2025-06-06
CVE-2025-29871	File Station 5 — File Station 5 CWE-125	5.5^AI	Medium ^AI	2025-06-06
CVE-2025-29872	File Station 5 — File Station 5 CWE-770	5.0^AI	Medium ^AI	2025-06-06
CVE-2025-29873	File Station 5 — File Station 5 CWE-476	7.5^AI	High ^AI	2025-06-06
CVE-2025-29876	File Station 5 — File Station 5 CWE-476	7.5^AI	High ^AI	2025-06-06
CVE-2025-29877	File Station 5 — File Station 5 CWE-476	7.5^AI	High ^AI	2025-06-06
CVE-2025-30279	File Station 5 — File Station 5 CWE-295	9.8^AI	Critical ^AI	2025-06-06
CVE-2025-33031	File Station 5 — File Station 5 CWE-295	9.8^AI	Critical ^AI	2025-06-06
CVE-2025-33035	File Station 5 — File Station 5 CWE-22	6.5^AI	Medium ^AI	2025-06-06
CVE-2024-48864	File Station 5 — File Station 5 CWE-552	9.1	-	2025-03-07

This page lists every published CVE security advisory associated with QNAP Systems Inc.. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.