QNAP QTS and QuTS hero command injection vulnerability

QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...

QNAP operating system command injection vulnerability

QNAP QTS is a Linux-based NAS operating system launched by QNAP, providing an intuitive and easy-to-use graphical interface and powerful data management features. QNAP QuTS hero is an operating system launched by QNAP specifically for enterprise-level applications, adopting the ZFS file system,...

QNAP QTS and QuTS hero path traversal vulnerability (CNVD-2025-27832)

QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...

PT-2024-2011 · Qnap · Qts +2

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.1.3.2578 build 20231110 QuTS hero versions prior to h5.1.3.2578 build 20231110 QuTScloud versions prior to c5.1.5.2651 Description: An injection vulnerability has been reported to affect several QNAP operating system...

QNAP Systems QUTS Hero cross-site scripting vulnerability

QNAP Systems QUTS Hero is a NAS operating system for file management from China Waylink QNAP Systems. The system retains the QTS application ecosystem and integrates a more powerful 128-bit ZFS file system to provide enterprises with a more stable and reliable NAS storage solution.QNAP Systems QU...

QSAN Storage Manager security vulnerabilities

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. An access control error vulnerability exists in FirmwareUpgrade in QSAN Storage Manager 3.3.1 and earlier versions. A remote attacker could exploit this vulnerability to reboot and disrupt the device...

QSAN Storage Manager path traversal vulnerability

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. A path traversal vulnerability exists in QSAN Storage Manager. The vulnerability stems from the product's getImage function not validating the path parameter in the URL, which allows an attacker to downlo...

Qnap Systems QNAP QTS and QNAP Systems QUTS Hero have command injection vulnerabilities

Qnap Systems QNAP QTS is a data storage device with SAN-like storage architecture from Qnap Systems, China. The device supports tiered storage, mirror protection, and other safeguard features.QNAP Systems QUTS Hero is a NAS operating system for file management from QNAP Systems, China. The system...