{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: QNAP vulnerabilities","home_page_url":"https://patchfirst.co/vendor/qnap/","feed_url":"https://patchfirst.co/feed/vendor/qnap.json","description":"New and newly exploited QNAP CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-47786","url":"https://patchfirst.co/cve/CVE-2026-47786/","title":"CVE-2026-47786: An OS command injection vulnerability has been reported to affect HybridDesk Station","content_text":"QNAP Systems Inc. · HybridDesk Station. Not in CISA KEV. EPSS 1.1% (higher than 64.8% of CVEs). CVSS 9.3 CRITICAL. Priority 21.7 of 100.","summary":"An OS command injection vulnerability has been reported to affect HybridDesk Station","date_published":"2026-10-15T00:00:00.000Z","date_modified":"2026-10-15T16:32:39.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.7,"kev":null,"epss":{"score":0.0107,"percentile":0.64824},"cvss":{"score":9.3,"severity":"CRITICAL","version":"4.0"},"vendor":"QNAP Systems Inc.","product":"HybridDesk Station","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-50619","url":"https://patchfirst.co/cve/CVE-2026-50619/","title":"CVE-2026-50619: A path traversal vulnerability has been reported to affect Qsirch","content_text":"QNAP Systems Inc. · Qsirch. Not in CISA KEV. EPSS 0.4% (higher than 37.2% of CVEs). CVSS 9.3 CRITICAL. Priority 16.2 of 100.","summary":"A path traversal vulnerability has been reported to affect Qsirch","date_published":"2026-10-15T00:00:00.000Z","date_modified":"2026-10-15T16:32:39.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.2,"kev":null,"epss":{"score":0.00429,"percentile":0.37162},"cvss":{"score":9.3,"severity":"CRITICAL","version":"4.0"},"vendor":"QNAP Systems Inc.","product":"Qsirch","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-34006","url":"https://patchfirst.co/cve/CVE-2026-34006/","title":"CVE-2026-34006: A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE","content_text":"QNAP Systems Inc. · sMedio DTCP MOVE. Not in CISA KEV. EPSS 0.4% (higher than 33.7% of CVEs). CVSS 9.3 CRITICAL. Priority 15.5 of 100.","summary":"A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE","date_published":"2026-10-15T00:00:00.000Z","date_modified":"2026-10-15T16:32:39.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.5,"kev":null,"epss":{"score":0.00395,"percentile":0.33702},"cvss":{"score":9.3,"severity":"CRITICAL","version":"4.0"},"vendor":"QNAP Systems Inc.","product":"sMedio DTCP MOVE","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-50612","url":"https://patchfirst.co/cve/CVE-2026-50612/","title":"CVE-2026-50612: An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie","content_text":"QNAP Systems Inc. · QuMagie. Not in CISA KEV. EPSS 0.4% (higher than 31.8% of CVEs). CVSS 9.4 CRITICAL. Priority 15.2 of 100.","summary":"An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie","date_published":"2026-10-15T00:00:00.000Z","date_modified":"2026-10-15T16:32:39.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.2,"kev":null,"epss":{"score":0.00378,"percentile":0.31753},"cvss":{"score":9.4,"severity":"CRITICAL","version":"4.0"},"vendor":"QNAP Systems Inc.","product":"QuMagie","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-11837","url":"https://patchfirst.co/cve/CVE-2025-11837/","title":"CVE-2025-11837: Malware Remover","content_text":"QNAP Systems Inc. · Malware Remover. Not in CISA KEV. EPSS 1.5% (higher than 74.6% of CVEs). CVSS 8.1 HIGH. Priority 63.0 of 100.","summary":"Malware Remover","date_published":"2026-01-02T00:00:00.000Z","date_modified":"2026-01-05T20:38:25.000Z","tags":[],"_patchfirst":{"reason":"published","priority":63,"kev":null,"epss":{"score":0.01523,"percentile":0.74607},"cvss":{"score":8.1,"severity":"HIGH","version":"4.0"},"vendor":"QNAP Systems Inc.","product":"Malware Remover","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2017-20210","url":"https://patchfirst.co/cve/CVE-2017-20210/","title":"CVE-2017-20210: Photo Station","content_text":"QNAP Systems Inc. · Photo Station. Not in CISA KEV. EPSS 0.4% (higher than 30.9% of CVEs). CVSS 9.8 CRITICAL. Priority 48.0 of 100.","summary":"Photo Station","date_published":"2025-11-11T00:00:00.000Z","date_modified":"2025-11-13T15:45:42.000Z","tags":[],"_patchfirst":{"reason":"published","priority":48,"kev":null,"epss":{"score":0.00369,"percentile":0.30865},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"QNAP Systems Inc.","product":"Photo Station","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-45038","url":"https://patchfirst.co/cve/CVE-2023-45038/","title":"CVE-2023-45038: Music Station","content_text":"QNAP Systems Inc. · Music Station. Not in CISA KEV. EPSS 1.2% (higher than 69.2% of CVEs). CVSS 4.3 MEDIUM. Public exploit code exists. Priority 56.9 of 100.","summary":"Music Station","date_published":"2024-09-06T00:00:00.000Z","date_modified":"2024-09-06T17:44:36.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":56.9,"kev":null,"epss":{"score":0.01243,"percentile":0.69221},"cvss":{"score":4.3,"severity":"MEDIUM","version":"3.1"},"vendor":"QNAP Systems Inc.","product":"Music Station","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-27130","url":"https://patchfirst.co/cve/CVE-2024-27130/","title":"CVE-2024-27130: QTS, QuTS hero","content_text":"QNAP Systems Inc. · QTS. Not in CISA KEV. EPSS 37.5% (higher than 98.5% of CVEs). CVSS 7.2 HIGH. Public exploit code exists. Priority 64.7 of 100.","summary":"QTS, QuTS hero","date_published":"2024-05-21T00:00:00.000Z","date_modified":"2024-08-02T00:27:59.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":64.7,"kev":null,"epss":{"score":0.3752,"percentile":0.98531},"cvss":{"score":7.2,"severity":"HIGH","version":"3.1"},"vendor":"QNAP Systems Inc.","product":"QTS","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-21899","url":"https://patchfirst.co/cve/CVE-2024-21899/","title":"CVE-2024-21899: QTS, QuTS hero, QuTScloud","content_text":"QNAP Systems Inc. · QTS. Not in CISA KEV. EPSS 24.4% (higher than 97.9% of CVEs). CVSS 9.8 CRITICAL. Priority 61.4 of 100.","summary":"QTS, QuTS hero, QuTScloud","date_published":"2024-03-08T00:00:00.000Z","date_modified":"2024-08-01T22:35:34.000Z","tags":[],"_patchfirst":{"reason":"published","priority":61.4,"kev":null,"epss":{"score":0.24365,"percentile":0.97864},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"QNAP Systems Inc.","product":"QTS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-47218","url":"https://patchfirst.co/cve/CVE-2023-47218/","title":"CVE-2023-47218: QTS, QuTS hero, QuTScloud","content_text":"QNAP Systems Inc. · QTS. Not in CISA KEV. EPSS 89.9% (higher than 99.79% of CVEs). CVSS 5.8 MEDIUM. Public exploit code exists. Priority 66.1 of 100.","summary":"QTS, QuTS hero, QuTScloud","date_published":"2024-02-13T00:00:00.000Z","date_modified":"2025-05-07T21:13:18.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":66.1,"kev":null,"epss":{"score":0.8992,"percentile":0.99791},"cvss":{"score":5.8,"severity":"MEDIUM","version":"3.1"},"vendor":"QNAP Systems Inc.","product":"QTS","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-50358","url":"https://patchfirst.co/cve/CVE-2023-50358/","title":"CVE-2023-50358: QTS, QuTS hero, QuTScloud","content_text":"QNAP Systems Inc. · QTS. Not in CISA KEV. EPSS 13.5% (higher than 96.4% of CVEs). CVSS 5.8 MEDIUM. Priority 59.7 of 100.","summary":"QTS, QuTS hero, QuTScloud","date_published":"2024-02-13T00:00:00.000Z","date_modified":"2025-05-09T18:16:31.000Z","tags":[],"_patchfirst":{"reason":"published","priority":59.7,"kev":null,"epss":{"score":0.13523,"percentile":0.96447},"cvss":{"score":5.8,"severity":"MEDIUM","version":"3.1"},"vendor":"QNAP Systems Inc.","product":"QTS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-39296","url":"https://patchfirst.co/cve/CVE-2023-39296/","title":"CVE-2023-39296: QTS, QuTS hero","content_text":"QNAP Systems Inc. · QTS. Not in CISA KEV. EPSS 1.6% (higher than 75.3% of CVEs). CVSS 7.5 HIGH. Priority 55.3 of 100.","summary":"QTS, QuTS hero","date_published":"2024-01-05T00:00:00.000Z","date_modified":"2025-06-03T14:41:20.000Z","tags":[],"_patchfirst":{"reason":"published","priority":55.3,"kev":null,"epss":{"score":0.01564,"percentile":0.75258},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"QNAP Systems Inc.","product":"QTS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-47565#kev","url":"https://patchfirst.co/cve/CVE-2023-47565/","title":"[KEV] CVE-2023-47565: QNAP VioStor NVR OS Command Injection Vulnerability","content_text":"QNAP · VioStor NVR. In CISA KEV since 2023-12-21. ENISA EUVD lists it as exploited. EPSS 73.3% (higher than 99.46% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1496 Resource Hijacking; T1498 Network Denial of Service. Priority 64.1 of 100.","summary":"QNAP VioStor NVR OS Command Injection Vulnerability","date_published":"2023-12-21T00:00:00.000Z","date_modified":"2026-06-17T06:32:55.000Z","tags":["kev","T1496","T1498"],"_patchfirst":{"reason":"kev","priority":64.1,"kev":{"dateAdded":"2023-12-21","ransomware":false},"epss":{"score":0.73277,"percentile":0.99458},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"QNAP","product":"VioStor NVR","techniqueIds":["T1496","T1498"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-27593#kev","url":"https://patchfirst.co/cve/CVE-2022-27593/","title":"[KEV] CVE-2022-27593: QNAP Photo Station Externally Controlled Reference Vulnerability","content_text":"QNAP · Photo Station. In CISA KEV since 2022-09-08, known ransomware use. ENISA EUVD lists it as exploited. EPSS 87.9% (higher than 99.76% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1565.001 Stored Data Manipulation. Priority 79.3 of 100.","summary":"QNAP Photo Station Externally Controlled Reference Vulnerability","date_published":"2022-09-08T00:00:00.000Z","date_modified":"2026-06-17T04:37:19.000Z","tags":["kev","ransomware","public-exploit","T1190","T1565.001"],"_patchfirst":{"reason":"kev","priority":79.3,"kev":{"dateAdded":"2022-09-08","ransomware":true},"epss":{"score":0.87908,"percentile":0.99762},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"QNAP","product":"Photo Station","techniqueIds":["T1190","T1565.001"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2019-7195#kev","url":"https://patchfirst.co/cve/CVE-2019-7195/","title":"[KEV] CVE-2019-7195: QNAP Photo Station Path Traversal Vulnerability","content_text":"QNAP · Photo Station. In CISA KEV since 2022-06-08, known ransomware use. ENISA EUVD lists it as exploited. EPSS 89.3% (higher than 99.78% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 79.8 of 100.","summary":"QNAP Photo Station Path Traversal Vulnerability","date_published":"2022-06-08T00:00:00.000Z","date_modified":"2026-06-17T02:40:14.000Z","tags":["kev","ransomware","public-exploit","T1190","T1005"],"_patchfirst":{"reason":"kev","priority":79.8,"kev":{"dateAdded":"2022-06-08","ransomware":true},"epss":{"score":0.89323,"percentile":0.99782},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"QNAP","product":"Photo Station","techniqueIds":["T1190","T1005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2019-7194#kev","url":"https://patchfirst.co/cve/CVE-2019-7194/","title":"[KEV] CVE-2019-7194: QNAP Photo Station Path Traversal Vulnerability","content_text":"QNAP · Photo Station. In CISA KEV since 2022-06-08, known ransomware use. ENISA EUVD lists it as exploited. EPSS 82.7% (higher than 99.67% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 79.8 of 100.","summary":"QNAP Photo Station Path Traversal Vulnerability","date_published":"2022-06-08T00:00:00.000Z","date_modified":"2026-06-17T02:40:14.000Z","tags":["kev","ransomware","public-exploit","T1190","T1005"],"_patchfirst":{"reason":"kev","priority":79.8,"kev":{"dateAdded":"2022-06-08","ransomware":true},"epss":{"score":0.82713,"percentile":0.99667},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"QNAP","product":"Photo Station","techniqueIds":["T1190","T1005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2019-7192#kev","url":"https://patchfirst.co/cve/CVE-2019-7192/","title":"[KEV] CVE-2019-7192: QNAP Photo Station Improper Access Control Vulnerability","content_text":"QNAP · Photo Station. In CISA KEV since 2022-06-08, known ransomware use. ENISA EUVD lists it as exploited. EPSS 88.1% (higher than 99.77% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 79.8 of 100.","summary":"QNAP Photo Station Improper Access Control Vulnerability","date_published":"2022-06-08T00:00:00.000Z","date_modified":"2026-06-17T02:40:14.000Z","tags":["kev","ransomware","public-exploit","T1190","T1078"],"_patchfirst":{"reason":"kev","priority":79.8,"kev":{"dateAdded":"2022-06-08","ransomware":true},"epss":{"score":0.88102,"percentile":0.99766},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"QNAP","product":"Photo Station","techniqueIds":["T1190","T1078"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2019-7193#kev","url":"https://patchfirst.co/cve/CVE-2019-7193/","title":"[KEV] CVE-2019-7193: QNAP QTS Improper Input Validation Vulnerability","content_text":"QNAP · QTS. In CISA KEV since 2022-06-08, known ransomware use. ENISA EUVD lists it as exploited. EPSS 14.4% (higher than 96.6% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.2 of 100.","summary":"QNAP QTS Improper Input Validation Vulnerability","date_published":"2022-06-08T00:00:00.000Z","date_modified":"2026-06-17T02:40:14.000Z","tags":["kev","ransomware","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":79.2,"kev":{"dateAdded":"2022-06-08","ransomware":true},"epss":{"score":0.14367,"percentile":0.96612},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"QNAP","product":"QTS","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2018-19949#kev","url":"https://patchfirst.co/cve/CVE-2018-19949/","title":"[KEV] CVE-2018-19949: QNAP NAS File Station Command Injection Vulnerability","content_text":"QNAP · Network Attached Storage (NAS). In CISA KEV since 2022-05-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 30.2% (higher than 98.2% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 74.5 of 100.","summary":"QNAP NAS File Station Command Injection Vulnerability","date_published":"2022-05-24T00:00:00.000Z","date_modified":"2026-10-02T04:17:58.000Z","tags":["kev","ransomware","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":74.5,"kev":{"dateAdded":"2022-05-24","ransomware":true},"epss":{"score":0.3016,"percentile":0.98215},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"QNAP","product":"Network Attached Storage (NAS)","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2018-19953#kev","url":"https://patchfirst.co/cve/CVE-2018-19953/","title":"[KEV] CVE-2018-19953: QNAP NAS File Station Cross-Site Scripting Vulnerability","content_text":"QNAP · Network Attached Storage (NAS). In CISA KEV since 2022-05-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 30.5% (higher than 98.2% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript. Priority 71.9 of 100.","summary":"QNAP NAS File Station Cross-Site Scripting Vulnerability","date_published":"2022-05-24T00:00:00.000Z","date_modified":"2026-10-01T20:17:17.000Z","tags":["kev","ransomware","T1189","T1059.007"],"_patchfirst":{"reason":"kev","priority":71.9,"kev":{"dateAdded":"2022-05-24","ransomware":true},"epss":{"score":0.30527,"percentile":0.98236},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"QNAP","product":"Network Attached Storage (NAS)","techniqueIds":["T1189","T1059.007"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2018-19943#kev","url":"https://patchfirst.co/cve/CVE-2018-19943/","title":"[KEV] CVE-2018-19943: QNAP NAS File Station Cross-Site Scripting Vulnerability","content_text":"QNAP · Network Attached Storage (NAS). In CISA KEV since 2022-05-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 22.7% (higher than 97.7% of CVEs). CVSS 5.4 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript. Priority 71.3 of 100.","summary":"QNAP NAS File Station Cross-Site Scripting Vulnerability","date_published":"2022-05-24T00:00:00.000Z","date_modified":"2026-08-13T05:17:17.000Z","tags":["kev","ransomware","T1189","T1059.007"],"_patchfirst":{"reason":"kev","priority":71.3,"kev":{"dateAdded":"2022-05-24","ransomware":true},"epss":{"score":0.22682,"percentile":0.9772},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.1"},"vendor":"QNAP","product":"Network Attached Storage (NAS)","techniqueIds":["T1189","T1059.007"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2020-2509#kev","url":"https://patchfirst.co/cve/CVE-2020-2509/","title":"[KEV] CVE-2020-2509: QNAP Network-Attached Storage (NAS) Command Injection Vulnerability","content_text":"QNAP · QNAP Network-Attached Storage (NAS). In CISA KEV since 2022-04-11. ENISA EUVD lists it as exploited. EPSS 34.0% (higher than 98.4% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.5 of 100.","summary":"QNAP Network-Attached Storage (NAS) Command Injection Vulnerability","date_published":"2022-04-11T00:00:00.000Z","date_modified":"2026-06-17T03:12:15.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":79.5,"kev":{"dateAdded":"2022-04-11","ransomware":false},"epss":{"score":0.33987,"percentile":0.98393},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"QNAP","product":"QNAP Network-Attached Storage (NAS)","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-28799#kev","url":"https://patchfirst.co/cve/CVE-2021-28799/","title":"[KEV] CVE-2021-28799: QNAP NAS Improper Authorization Vulnerability","content_text":"QNAP · Network Attached Storage (NAS). In CISA KEV since 2022-03-31, known ransomware use. ENISA EUVD lists it as exploited. EPSS 78.3% (higher than 99.58% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 79.8 of 100.","summary":"QNAP NAS Improper Authorization Vulnerability","date_published":"2022-03-31T00:00:00.000Z","date_modified":"2026-06-17T03:46:53.000Z","tags":["kev","ransomware","public-exploit","T1190","T1078"],"_patchfirst":{"reason":"kev","priority":79.8,"kev":{"dateAdded":"2022-03-31","ransomware":true},"epss":{"score":0.7825,"percentile":0.99578},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"QNAP","product":"Network Attached Storage (NAS)","techniqueIds":["T1190","T1078"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2020-2506#kev","url":"https://patchfirst.co/cve/CVE-2020-2506/","title":"[KEV] CVE-2020-2506: QNAP Helpdesk Improper Access Control Vulnerability","content_text":"QNAP Systems · Helpdesk. In CISA KEV since 2022-03-25. ENISA EUVD lists it as exploited. EPSS 2.0% (higher than 80.8% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1068 Exploitation for Privilege Escalation. Priority 61.0 of 100.","summary":"QNAP Helpdesk Improper Access Control Vulnerability","date_published":"2022-03-25T00:00:00.000Z","date_modified":"2026-06-17T03:12:15.000Z","tags":["kev","T1190","T1068"],"_patchfirst":{"reason":"kev","priority":61,"kev":{"dateAdded":"2022-03-25","ransomware":false},"epss":{"score":0.02006,"percentile":0.80799},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"QNAP Systems","product":"Helpdesk","techniqueIds":["T1190","T1068"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2020-36198","url":"https://patchfirst.co/cve/CVE-2020-36198/","title":"CVE-2020-36198: Command Injection Vulnerability in Malware Remover","content_text":"QNAP Systems Inc. · Malware Remover. Not in CISA KEV. EPSS 1.1% (higher than 66.2% of CVEs). CVSS 6.7 MEDIUM. Public exploit code exists. Priority 69.0 of 100.","summary":"Command Injection Vulnerability in Malware Remover","date_published":"2021-05-13T00:00:00.000Z","date_modified":"2024-09-17T01:10:58.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":69,"kev":null,"epss":{"score":0.01123,"percentile":0.66202},"cvss":{"score":6.7,"severity":"MEDIUM","version":"3.1"},"vendor":"QNAP Systems Inc.","product":"Malware Remover","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2020-36195","url":"https://patchfirst.co/cve/CVE-2020-36195/","title":"CVE-2020-36195: SQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-On","content_text":"QNAP Systems Inc. · QTS. Not in CISA KEV. EPSS 1.8% (higher than 78% of CVEs). CVSS 9.8 CRITICAL. Priority 67.5 of 100.","summary":"SQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-On","date_published":"2021-04-17T00:00:00.000Z","date_modified":"2024-09-16T17:28:07.000Z","tags":[],"_patchfirst":{"reason":"published","priority":67.5,"kev":null,"epss":{"score":0.01765,"percentile":0.78039},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"QNAP Systems Inc.","product":"QTS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-2507","url":"https://patchfirst.co/cve/CVE-2020-2507/","title":"CVE-2020-2507: command injection vulnerability in Helpdesk","content_text":"QNAP Systems Inc. · Helpdesk. Not in CISA KEV. EPSS 3.1% (higher than 87.7% of CVEs). CVSS 9.8 CRITICAL. Priority 59.4 of 100.","summary":"command injection vulnerability in Helpdesk","date_published":"2021-02-03T00:00:00.000Z","date_modified":"2024-09-16T19:40:15.000Z","tags":[],"_patchfirst":{"reason":"published","priority":59.4,"kev":null,"epss":{"score":0.03079,"percentile":0.87659},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"QNAP Systems Inc.","product":"Helpdesk","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-0707","url":"https://patchfirst.co/cve/CVE-2018-0707/","title":"CVE-2018-0707: Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier…","content_text":"QNAP · Q'center Virtual Appliance. Not in CISA KEV. EPSS 58.8% (higher than 99.11% of CVEs). Public exploit code exists. Priority 24.8 of 100.","summary":"Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier…","date_published":"2018-07-16T00:00:00.000Z","date_modified":"2024-09-16T17:22:44.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":24.8,"kev":null,"epss":{"score":0.58798,"percentile":0.99105},"cvss":null,"vendor":"QNAP","product":"Q'center Virtual Appliance","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}}]}