| 505032 | Qnap QTS and QuTS hero Stack-based Buffer Overflow (CVE-2025-62852) | Tenable OT Security | Tenable.ot | 2026/1/20 | 2026/2/4 | medium |
| 505029 | Qnap QTS and QuTS hero Buffer Copy without Checking Size of Input (CVE-2025-48721) | Tenable OT Security | Tenable.ot | 2026/1/20 | 2026/2/4 | medium |
| 502587 | Qnap QTS Incorrect Permission Assignment for Critical Resource (CVE-2024-21902) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | high |
| 505306 | Qnap QTS and QuTS hero Improper Neutralization of CRLF Sequences (CVE-2024-14026) | Tenable OT Security | Tenable.ot | 2026/3/23 | 2026/3/24 | medium |
| 504959 | Qnap QTS and QuTS hero Out-of-bounds Write (CVE-2024-53697) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | low |
| 504848 | Qnap QTS and QuTS hero Buffer Copy without Checking Size of Input (CVE-2024-37050) | Tenable OT Security | Tenable.ot | 2025/12/11 | 2026/2/24 | medium |
| 504847 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2024-37048) | Tenable OT Security | Tenable.ot | 2025/12/11 | 2026/2/24 | medium |
| 504820 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-30272) | Tenable OT Security | Tenable.ot | 2025/12/9 | 2026/2/25 | medium |
| 504821 | Qnap QTS and QuTS hero Path Traversal (CVE-2025-30271) | Tenable OT Security | Tenable.ot | 2025/12/9 | 2026/2/25 | medium |
| 504817 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-30268) | Tenable OT Security | Tenable.ot | 2025/12/9 | 2026/2/25 | medium |
| 504966 | Qnap QTS and QuTS hero Double Free (CVE-2024-53698) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | low |
| 505308 | Qnap QTS and QuTS hero Improper Neutralization of Special Elements used in a Command (CVE-2024-14026) | Tenable OT Security | Tenable.ot | 2026/3/23 | 2026/3/24 | medium |
| 504973 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52428) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 504818 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-30274) | Tenable OT Security | Tenable.ot | 2025/12/9 | 2026/2/25 | medium |
| 504964 | Qnap QTS and QuTS hero Improper Neutralization of Special Elements used in an OS Command (CVE-2025-47212) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 502566 | Qnap QTS Cleartext Transmission of Sensitive Information (CVE-2023-34972) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | medium |
| 502577 | Qnap QTS Server-Side Request Forgery (SSRF) (CVE-2023-39301) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | medium |
| 504826 | Qnap QTS and QuTS hero Buffer Overflow (CVE-2025-30265) | Tenable OT Security | Tenable.ot | 2025/12/9 | 2026/2/25 | low |
| 504834 | Qnap QTS and QuTS hero Use of Externally-Controlled Format String (CVE-2024-50397) | Tenable OT Security | Tenable.ot | 2025/12/11 | 2026/2/24 | high |
| 504968 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52433) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 504970 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52858) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 504976 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52866) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 504981 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52862) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 504986 | Qnap QTS and QuTS hero Improper Limitation of a Pathname to a Restricted Directory (CVE-2025-47211) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 505002 | Qnap QTS and QuTS hero Improper Neutralization of Argument Delimiters in a Command (CVE-2025-62847) | Tenable OT Security | Tenable.ot | 2026/1/19 | 2026/2/5 | high |
| 504987 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52424) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 504975 | Qnap QTS and QuTS hero Use of Externally-Controlled Format String (CVE-2025-52429) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 504979 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52854) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 504984 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-48726) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 505020 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-53405) | Tenable OT Security | Tenable.ot | 2026/1/20 | 2026/2/4 | medium |
| 505024 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-53596) | Tenable OT Security | Tenable.ot | 2026/1/20 | 2026/2/4 | medium |
| 505013 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52431) | Tenable OT Security | Tenable.ot | 2026/1/20 | 2026/2/4 | medium |
| 504837 | Qnap QTS and QuTS hero Buffer Copy without Checking Size of Input (CVE-2024-37041) | Tenable OT Security | Tenable.ot | 2025/12/11 | 2026/2/24 | medium |
| 504960 | Qnap QTS and QuTS hero Out-of-bounds Write (CVE-2024-53699) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | low |
| 504846 | Qnap QTS and QuTS hero Buffer Copy without Checking Size of Input (CVE-2024-37047) | Tenable OT Security | Tenable.ot | 2025/12/11 | 2026/2/24 | medium |
| 504824 | Qnap QTS and QuTS hero Out-of-Bounds Write (CVE-2025-30273) | Tenable OT Security | Tenable.ot | 2025/12/9 | 2026/2/25 | high |
| 504839 | Qnap QTS and QuTS hero Buffer Copy without Checking Size of Input (CVE-2024-37044) | Tenable OT Security | Tenable.ot | 2025/12/11 | 2026/2/24 | medium |
| 504845 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2024-37045) | Tenable OT Security | Tenable.ot | 2025/12/11 | 2026/2/24 | medium |
| 504965 | Qnap QTS and QuTS Hero Buffer Copy without Checking Size of Input (CVE-2024-56805) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 505004 | Qnap QTS and QuTS hero Improper Neutralization of Special Elements used in an SQL Command (CVE-2025-62849) | Tenable OT Security | Tenable.ot | 2026/1/19 | 2026/2/5 | high |
| 505307 | Qnap QTS and QuTS hero Improper Neutralization of CRLF Sequences (CVE-2024-14026) | Tenable OT Security | Tenable.ot | 2026/3/23 | 2026/3/24 | medium |
| 505011 | Qnap QTS and QuTS hero Exposure of Sensitive System Information to an Unauthorized Control Sphere (CVE-2025-9110) | Tenable OT Security | Tenable.ot | 2026/1/20 | 2026/2/4 | medium |
| 505023 | Qnap QTS and QuTS hero Out-of-bounds Read (CVE-2025-54165) | Tenable OT Security | Tenable.ot | 2026/1/20 | 2026/2/4 | medium |
| 504999 | Qnap QTS and QuTS hero Uncontrolled Resource Consumption (CVE-2022-27600) | Tenable OT Security | Tenable.ot | 2026/1/19 | 2026/2/5 | high |
| 505003 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-62848) | Tenable OT Security | Tenable.ot | 2026/1/19 | 2026/2/5 | critical |
| 505026 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-53592) | Tenable OT Security | Tenable.ot | 2026/1/20 | 2026/2/4 | medium |
| 504828 | Qnap QTS and QuTS hero Improper Certificate Validation (CVE-2024-48865) | Tenable OT Security | Tenable.ot | 2025/12/11 | 2026/2/24 | high |
| 502612 | Qnap QTS Improper Restriction of Excessive Authentication Attempts (CVE-2024-32771) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | low |
| 504969 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52857) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 504983 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52432) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
