Known vulnerabilities in QuTScloud

Software: QuTScloud
Software CPE: cpe:2.3:o:qnap_systems:qutscloud:*:*:*:*:*:*:*:*
Total vulnerabilities: 119
Public exploits: 8
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QuTScloud QuTScloud is affected by 119 known vulnerabilities: 1 critical, 14 high, 52 medium, 52 low Critical High Medium Low

Vulnerabilities (119)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134947 - NULL Pointer Dereference
CVE-2025-66281
CWE-476 Medium
No
No
c5.2.9 19.06.2026 SB20260619105
#VU134946 - Allocation of Resources Without Limits or Throttling
CVE-2026-24720
CWE-770 Medium
No
No
c5.2.9 19.06.2026 SB20260619105
#VU134945 - NULL Pointer Dereference
CVE-2026-22899
CWE-476 Medium
No
No
c5.2.9 19.06.2026 SB20260619105
#VU134944 - Incorrect Authorization
CVE-2026-24724
CWE-863 Medium
No
No
c5.2.9 19.06.2026 SB20260619105
#VU134943 - Stack-based buffer overflow
CVE-2026-26241
CWE-121 High
No
No
c5.2.9 19.06.2026 SB20260619105
#VU134941 - Stack-based buffer overflow
CVE-2026-26240
CWE-121 High
No
No
c5.2.9 19.06.2026 SB20260619105
#VU134940 - Stack-based buffer overflow
CVE-2026-26239
CWE-121 Medium
No
No
c5.2.9 19.06.2026 SB20260619105
#VU134938 - Stack-based buffer overflow
CVE-2025-68405
CWE-121 Low
No
No
c5.2.9 19.06.2026 SB20260619105
#VU134937 - Stack-based buffer overflow
CVE-2025-66280
CWE-121 Low
No
No
c5.2.9 19.06.2026 SB20260619105
#VU134936 - Stack-based buffer overflow
CVE-2025-62858
CWE-121 Low
No
No
c5.2.9 19.06.2026 SB20260619105
#VU134935 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-22893
CWE-78 Low
No
No
c5.2.9 19.06.2026 SB20260619105
#VU134934 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-66279
CWE-78 Low
No
No
c5.2.9 19.06.2026 SB20260619105
#VU134933 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-66273
CWE-78 Low
No
No
c5.2.9 19.06.2026 SB20260619105
#VU134921 - External Control of Assumed-Immutable Web Parameter
CVE-2025-59382
CWE-472 Medium
No
No
c5.2.9 19.06.2026 SB20260619105
#VU130763 - Resource Management Errors
CVE-2026-43284
CWE-399 High
Available
Exploited
- 08.05.2026 SB20260508111
SB20260508120
SB20260508121
and 72 more
#VU130759 - Resource Management Errors
CVE-2026-43500
CWE-399 High
Available
Exploited
- 08.05.2026 SB20260508108
SB20260508120
SB20260508121
and 32 more
#VU89040 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-51365
CWE-22 Medium
No
No
c5.1.5.2651 29.04.2024 SB2024042916
#VU89039 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-51364
CWE-22 Medium
No
No
c5.1.5.2651 29.04.2024 SB2024042916
#VU89038 - Integer overflow
CVE-2024-21905
CWE-190 Medium
No
No
c5.1.5.2651 29.04.2024 SB2024042904
#VU82011 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-34975
CWE-89 Medium
No
No
c5.1.0.2498 build 20230822 16.10.2023 SB2023101604
SB2024031114


Showing elements 1 - 20 out of 119