QNAP
In 7 briefs, most recently 24 March 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
11 QNAP vulnerabilities are on CISA's list of vulnerabilities exploited in the wild, 9 of them used in ransomware campaigns. Most recent:
- CVE-2023-47565 QNAP VioStor NVR OS Command Injection Vulnerability
- CVE-2022-27593 QNAP Photo Station Externally Controlled Reference Vulnerability
- CVE-2019-7195 QNAP Photo Station Path Traversal Vulnerability
- CVE-2019-7194 QNAP Photo Station Path Traversal Vulnerability
- CVE-2019-7193 QNAP QTS Improper Input Validation Vulnerability
- CVE-2019-7192 QNAP Photo Station Improper Access Control Vulnerability
- CVE-2018-19953 QNAP NAS File Station Cross-Site Scripting Vulnerability
- CVE-2018-19949 QNAP NAS File Station Command Injection Vulnerability
Coverage in DanSec Daily
- Mazda security incident, Crunchyroll's alleged 6.8M-user breach, and the TeamPCP Trivy supply chain attack with Kubernetes wipers.
- Oracle EBS Cl0p extortion hits nearly 30 firms incl. Logitech and Washington Post; CBO confirms breach; Konni abuses Google Find Hub.
- Covers the CBO hack, Russian destructive attacks on Ukraine's grain sector, and LANDFALL spyware exploiting a Samsung zero-day via WhatsApp images.
- The Dentsu/Merkle breach, Cl0p's Oracle EBS zero-day attacks on Schneider Electric and Emerson, and TEE.Fail trusted execution attacks.
- Top Secret clearance database exposed, ChatGPT Atlas hidden-command flaw, and Chrome zero-day tied to Memento Labs spyware.
- The PassiveNeuron espionage campaign, the actively exploited Oracle E-Business Suite SSRF flaw (CVE-2025-61884), and a WatchGuard Firebox RCE flaw affecting …
- ConnectWise ScreenConnect breach by suspected nation-state, DragonForce ransomware via SimpleHelp RMM, and Victoria's Secret site outage.