Browse all 558 CVE security advisories affecting QNAP Systems Inc.. AI-powered Chinese analysis, POCs, and references for each vulnerability.
QNAP Systems Inc. manufactures network-attached storage devices and enterprise storage solutions, primarily serving small to medium-sized businesses and home users seeking centralized data management. Historically, the company’s firmware has exhibited a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from insufficient input validation and improper access controls within the web management interface or embedded services. Notable incidents involve critical RCE vulnerabilities that allow unauthenticated attackers to gain full system control, exposing connected data to theft or ransomware encryption. The sheer number of recorded CVEs highlights persistent challenges in secure coding practices and rigorous patch management across its diverse product line. While QNAP provides security updates, the frequency of disclosed flaws necessitates strict network segmentation and proactive monitoring for administrators relying on these storage appliances for critical infrastructure.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-50406 | License Center — License Center CWE-79 | 5.4AI | Medium AI | 2025-06-06 |
| CVE-2025-22481 | QTS, QuTS hero — QTS CWE-77 | 8.8AI | High AI | 2025-06-06 |
| CVE-2024-56805 | QTS, QuTS hero — QTS CWE-120 | 8.1AI | High AI | 2025-06-06 |
| CVE-2024-13088 | QHora — QuRouter CWE-287 | 7.8AI | High AI | 2025-06-06 |
| CVE-2024-13087 | QHora — QuRouter CWE-78 | 7.2AI | High AI | 2025-06-06 |
| CVE-2025-22484 | File Station 5 — File Station 5 CWE-770 | 5.0AI | Medium AI | 2025-06-06 |
| CVE-2025-22490 | File Station 5 — File Station 5 CWE-476 | 7.5AI | High AI | 2025-06-06 |
| CVE-2025-29871 | File Station 5 — File Station 5 CWE-125 | 5.5AI | Medium AI | 2025-06-06 |
| CVE-2025-29872 | File Station 5 — File Station 5 CWE-770 | 5.0AI | Medium AI | 2025-06-06 |
| CVE-2025-29873 | File Station 5 — File Station 5 CWE-476 | 7.5AI | High AI | 2025-06-06 |
| CVE-2025-29876 | File Station 5 — File Station 5 CWE-476 | 7.5AI | High AI | 2025-06-06 |
| CVE-2025-29877 | File Station 5 — File Station 5 CWE-476 | 7.5AI | High AI | 2025-06-06 |
| CVE-2025-30279 | File Station 5 — File Station 5 CWE-295 | 9.8AI | Critical AI | 2025-06-06 |
| CVE-2025-33031 | File Station 5 — File Station 5 CWE-295 | 9.8AI | Critical AI | 2025-06-06 |
| CVE-2025-33035 | File Station 5 — File Station 5 CWE-22 | 6.5AI | Medium AI | 2025-06-06 |
| CVE-2024-53700 | QHora — QuRouter CWE-77 | 7.2 | - | 2025-03-07 |
| CVE-2024-53699 | QTS, QuTS hero — QTS CWE-787 | 6.5 | - | 2025-03-07 |
| CVE-2024-53698 | QTS, QuTS hero — QTS CWE-415 | 5.5 | - | 2025-03-07 |
| CVE-2024-53697 | QTS, QuTS hero — QTS CWE-787 | 6.5 | - | 2025-03-07 |
| CVE-2024-53696 | QuLog Center — QuLog Center CWE-918 | 4.9 | - | 2025-03-07 |
| CVE-2024-53695 | HBS 3 Hybrid Backup Sync — HBS 3 Hybrid Backup Sync CWE-120 | 9.1 | - | 2025-03-07 |
| CVE-2024-53694 | QVPN Device Client, Qsync, Qfinder Pro — QVPN Device Client for Mac CWE-367 | 7.0 | - | 2025-03-07 |
| CVE-2024-53693 | QTS, QuTS hero — QTS CWE-93 | 4.3 | - | 2025-03-07 |
| CVE-2024-53692 | QTS, QuTS hero — QTS CWE-77 | 7.2 | - | 2025-03-07 |
| CVE-2024-50405 | QTS, QuTS hero — QTS CWE-93 | 2.7 | - | 2025-03-07 |
| CVE-2024-50394 | Helpdesk — Helpdesk CWE-295 | 7.4 | - | 2025-03-07 |
| CVE-2024-50390 | QHora — QuRouter CWE-1188 | 9.8 | - | 2025-03-07 |
| CVE-2024-48864 | File Station 5 — File Station 5 CWE-552 | 9.1 | - | 2025-03-07 |
| CVE-2024-38638 | QTS, QuTS hero — QTS CWE-787 | 6.5 | - | 2025-03-07 |
| CVE-2024-13086 | QTS, QuTS hero — QTS CWE-200 | 5.3 | Medium | 2025-03-07 |
This page lists every published CVE security advisory associated with QNAP Systems Inc.. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.