QNAP
11 QNAP flaws are on CISA's list of vulnerabilities attackers have used, 0 of them added in 2026. CISA says 9 are known to be used by ransomware. The latest was added Dec 21, 2023.
11on CISA's list, all time
0added in 2026
0in the last 90 days
9used by ransomware
1zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| Photo Station | 4 | Sep 8, 2022 |
| Network Attached Storage (NAS) | 4 | May 24, 2022 |
| VioStor NVR | 1 | Dec 21, 2023 |
| QTS | 1 | Jun 8, 2022 |
| QNAP Network-Attached Storage (NAS) | 1 | Apr 11, 2022 |
Latest QNAP flaws
- VioStor NVRQNAP VioStor NVR OS Command Injection Vulnerability
- Photo StationQNAP Photo Station Externally Controlled Reference Vulnerability
- Photo StationQNAP Photo Station Improper Access Control Vulnerability
- QTSQNAP QTS Improper Input Validation Vulnerability
- Photo StationQNAP Photo Station Path Traversal Vulnerability
- Photo StationQNAP Photo Station Path Traversal Vulnerability
- Network Attached Storage (NAS)QNAP NAS File Station Cross-Site Scripting Vulnerability
- Network Attached Storage (NAS)QNAP NAS File Station Command Injection Vulnerability
- Network Attached Storage (NAS)QNAP NAS File Station Cross-Site Scripting Vulnerability
- QNAP Network-Attached Storage (NAS)QNAP Network-Attached Storage (NAS) Command Injection Vulnerability
- Network Attached Storage (NAS)QNAP NAS Improper Authorization Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.