Known vulnerabilities in QNAP QTS - page 3

Software: QNAP QTS
Software CPE: cpe:2.3:a:qnap_systems:qnap_qts:*:*:*:*:*:*:*:*
Total vulnerabilities: 353
Public exploits: 21
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QNAP QTS QNAP QTS is affected by 353 known vulnerabilities: 7 critical, 61 high, 121 medium, 164 low Critical High Medium Low

Vulnerabilities (353)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120928 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-59381
CWE-22 Low
No
No
5.2.8.3332 20251128 05.01.2026 SB2026010582
#VU120927 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-59380
CWE-22 Low
No
No
5.2.8.3332 20251128 05.01.2026 SB2026010582
#VU120926 - Memory corruption
CVE-2025-62852
CWE-119 Low
No
No
5.2.8.3332 20251128 05.01.2026 SB2026010582
#VU120923 - Memory corruption
CVE-2025-48721
CWE-119 Low
No
No
5.2.8.3332 20251128 05.01.2026 SB2026010582
#VU120921 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2025-9110
CWE-497 Medium
No
No
5.2.8.3332 20251128 05.01.2026 SB2026010582
#VU118513 - Improper input validation
CVE-2025-62848
CWE-20 Critical
No
No
5.2.7.3297 20251024 13.11.2025 SB2025111353
#VU118514 - Improper input validation
CVE-2025-62849
CWE-20 Critical
No
No
5.2.7.3297 20251024 13.11.2025 SB2025111353
#VU118512 - Improper input validation
CVE-2025-62847
CWE-20 Critical
No
No
5.2.7.3297 20251024 13.11.2025 SB2025111353
#VU116683 - Use of Externally-Controlled Format String
CVE-2025-53407
CWE-134 Low
No
No
5.2.6.3195 20250715 07.10.2025 SB2025100744
#VU116682 - Use of Externally-Controlled Format String
CVE-2025-53406
CWE-134 Low
No
No
5.2.6.3195 20250715 07.10.2025 SB2025100744
#VU116681 - Use of Externally-Controlled Format String
CVE-2025-52429
CWE-134 Low
No
No
5.2.6.3195 20250715 07.10.2025 SB2025100744
#VU116680 - Use of Externally-Controlled Format String
CVE-2025-48730
CWE-134 Low
No
No
5.2.6.3195 20250715 07.10.2025 SB2025100744
#VU116679 - NULL Pointer Dereference
CVE-2025-52866
CWE-476 Low
No
No
5.2.6.3195 20250715 07.10.2025 SB2025100744
#VU116678 - NULL Pointer Dereference
CVE-2025-52862
CWE-476 Low
No
No
5.2.6.3195 20250715 07.10.2025 SB2025100744
#VU116677 - NULL Pointer Dereference
CVE-2025-52860
CWE-476 Low
No
No
5.2.6.3195 20250715 07.10.2025 SB2025100744
#VU116676 - NULL Pointer Dereference
CVE-2025-52859
CWE-476 Low
No
No
5.2.6.3195 20250715 07.10.2025 SB2025100744
#VU116675 - NULL Pointer Dereference
CVE-2025-52858
CWE-476 Low
No
No
5.2.6.3195 20250715 07.10.2025 SB2025100744
#VU116674 - NULL Pointer Dereference
CVE-2025-52857
CWE-476 Low
No
No
5.2.6.3195 20250715 07.10.2025 SB2025100744
#VU116673 - NULL Pointer Dereference
CVE-2025-52855
CWE-476 Low
No
No
5.2.6.3195 20250715 07.10.2025 SB2025100744
#VU116671 - NULL Pointer Dereference
CVE-2025-52853
CWE-476 Low
No
No
5.2.6.3195 20250715 07.10.2025 SB2025100744


Showing elements 41 - 60 out of 353