Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2738▼ 488 respecto a la semana anterior
Críticas / altas1301▼ 189 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior
640 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (5.1) | 1.2% | — | Qnap Qurouter | 7/3/2025 | 17/6/2026 | A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuRouter 2.4.6.028 and later | |
| Analizada | Baja (2.1) | 0.50% | — | Qnap QTSQnap Quts Hero | 7/3/2025 | 17/6/2026 | An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory. We have already fixed the vulnerability in the following versions: QTS 5.2.3.3006 build… | |
| Analizada | Baja (2.1) | 0.39% | — | Qnap QTSQnap Quts Hero | 7/3/2025 | 17/6/2026 | A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify memory. We have already fixed the vulnerability in the following versions: QTS 5.2.3.3006 build 20250108 and later… | |
| Analizada | Baja (2.1) | 0.50% | — | Qnap Quts HeroQnap QTS | 7/3/2025 | 17/6/2026 | An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory. We have already fixed the vulnerability in the following versions: QTS 5.2.3.3006 build… | |
| Analizada | Media (5.1) | 0.45% | — | Qnap Qulog CenterQnap QTSQnap Quts Hero | 7/3/2025 | 17/6/2026 | A server-side request forgery (SSRF) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers who have gained administrator access to read application data. We have already fixed the vulnerability in the following versions: QuLog Center 1.7.0.829 ( 2024/10/01… | |
| Analizada | Media (6.3) | 0.52% | — | Qnap Hybrid Backup Sync | 7/3/2025 | 17/6/2026 | A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify memory or crash processes. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.4.952 and later | |
| Aplazada | Alta (8.6) | 0.13% | — | Qnap Qvpn Device ClientAIQnap QsyncAIQnap Qfinder PROAI | 7/3/2025 | 17/6/2026 | A time-of-check time-of-use (TOCTOU) race condition vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow local attackers who have gained user access to gain access to otherwise unauthorized resources. We have already fixed the vulnerability in the following… | |
| Analizada | Alta (7.1) | 0.49% | — | Qnap QTSQnap Quts Hero | 7/3/2025 | 17/6/2026 | An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to modify application data. We have already fixed the vulnerability in the following… | |
| Analizada | Media (5.1) | 0.83% | — | Qnap QTSQnap Quts Hero | 7/3/2025 | 17/6/2026 | A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.3.3006 build… | |
| Analizada | Media (5.1) | 0.41% | — | Qnap QTSQnap Quts Hero | 7/3/2025 | 17/6/2026 | An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify application data. We have already fixed the vulnerability in the… | |
| Analizada | Alta (7.7) | 0.31% | — | Qnap Helpdesk | 7/3/2025 | 17/6/2026 | An improper certificate validation vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: Helpdesk 3.3.3 and later | |
| Analizada | Alta (7.7) | 1.1% | — | Qnap Qurouter | 7/3/2025 | 17/6/2026 | A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuRouter 2.4.5.032 and later | |
| Analizada | Media (5.3) | 0.49% | — | Qnap File Station | 7/3/2025 | 17/6/2026 | A files or directories accessible to external parties vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers to read/write files or directories. We have already fixed the vulnerability in the following versions: File Station 5 5.5.6.4741 and later | |
| Analizada | Baja (2.1) | 0.50% | — | Qnap QTSQnap Quts Hero | 7/3/2025 | 17/6/2026 | An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory. QTS 5.2.x/QuTS hero h5.2.x are not affected. We have already fixed the vulnerability in… | |
| Analizada | Alta (7.5) | 0.42% | — | Qnap QTSQnap Quts Hero | 7/3/2025 | 17/6/2026 | An exposure of sensitive information vulnerability has been reported to affect product. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QTS 5.2.0.2851 build 20240808 and later QuTS hero h5.2.0.2851… | |
| Analizada | Media (4.8) | 0.36% | — | Qnap Qulog Center | 19/12/2024 | 17/6/2026 | A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to bypass security mechanisms or read application data. We have already fixed the vulnerability in the… | |
| Analizada | Alta (7.2) | 0.94% | — | Qnap Qufirewall | 19/12/2024 | 17/6/2026 | A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QuFirewall 2.3.3 (… | |
| Analizada | Alta (8.7) | 0.54% | — | Qnap Qulog Center | 19/12/2024 | 17/6/2026 | A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following… | |
| Analizada | Alta (7.5) | 0.59% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 19/12/2024 | 17/6/2026 | An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2277 and later QTS… | |
| Analizada | Alta (7.8) | 0.18% | — | Qnap Qvpn | 19/12/2024 | 17/6/2026 | An insecure library loading vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local attackers who have gained user access to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: QVPN Windows 2.0.0.1316 and… | |
| Analizada | Alta (8.7) | 23% | 💥 PoC | Qnap QTSQnap Quts Hero | 6/12/2024 | 17/6/2026 | A link following vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the file system to unintended locations. We have already fixed the vulnerability in the following versions: QTS… | |
| Analizada | Media (6.8) | 1.4% | 💥 PoC | Qnap Qsync Central | 6/12/2024 | 17/6/2026 | A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the file system to unintended locations. We have already fixed the vulnerability in the following versions: Qsync Central 4.4.0.16_20240819 (… | |
| Analizada | Baja (2.1) | 0.48% | — | Qnap QTSQnap Quts Hero | 6/12/2024 | 17/6/2026 | A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the vulnerability in the… | |
| Analizada | Baja (2.1) | 0.53% | — | Qnap QTSQnap Quts Hero | 6/12/2024 | 17/6/2026 | A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the vulnerability in the… | |
| Analizada | Alta (8.7) | 1.3% | — | Qnap QTSQnap Quts Hero | 6/12/2024 | 17/6/2026 | A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.1.9.2954 build 20241120 and later QTS 5.2.2.2950… |