| 502617 | Qnap QTS Classic Buffer Overflow (CVE-2024-27129) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | high |
| 502558 | Qnap QTS Classic Buffer Overflow (CVE-2023-45041) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | high |
| 505361 | Qnap QTS Improper Access Control (CVE-2025-66276) | Tenable OT Security | Tenable.ot | 2026/6/12 | 2026/8/7 | critical |
| 505309 | Qnap QTS and QuTS hero Improper Neutralization of Special Elements used in an OS Command (CVE-2024-14026) | Tenable OT Security | Tenable.ot | 2026/3/23 | 2026/3/24 | medium |
| 504816 | Qnap QTS and QuTS hero Server-Side Request Forgery(CVE-2024-53696) | Tenable OT Security | Tenable.ot | 2025/12/8 | 2026/2/26 | medium |
| 502487 | Qnap QTS Classic Buffer Overflow (CVE-2023-41292) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | high |
| 502602 | Qnap QTS OS Command Injection (CVE-2023-41282) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | high |
| 502611 | Qnap QTS Classic Buffer Overflow (CVE-2023-45042) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | high |
| 502579 | Qnap QTS Classic Buffer Overflow (CVE-2023-45043) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | high |
| 502573 | Qnap QTS NULL Pointer Dereference (CVE-2023-41274) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | medium |
| 502522 | Qnap QTS Cross-site Scripting (CVE-2024-21897) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | medium |
| 502595 | Qnap QTS Classic Buffer Overflow (CVE-2023-50362) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | high |
| 502584 | Qnap QTS OS Command Injection (CVE-2023-41283) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | high |
| 502520 | Qnap QTS Classic Buffer Overflow (CVE-2024-27128) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | high |
| 502629 | Qnap QTS OS Command Injection (CVE-2023-47567) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | high |
| 504972 | Qnap QTS and QuTS hero Use of Externally-Controlled Format String (CVE-2025-48730) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 504985 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-48728) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 504967 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52860) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 504977 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52853) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 502605 | Qnap QuTS hero Cross-site Scripting (CVE-2020-2495) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | medium |
| 502530 | Qnap QuTS hero Cross-site Scripting (CVE-2020-2498) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | medium |
| 505016 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-53414) | Tenable OT Security | Tenable.ot | 2026/1/20 | 2026/2/4 | medium |
| 505014 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52430) | Tenable OT Security | Tenable.ot | 2026/1/20 | 2026/2/4 | medium |
| 505902 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-66281) | Tenable OT Security | Tenable.ot | 2026/7/31 | 2026/8/3 | medium |
| 504841 | Qnap QTS and QuTS hero Improper Neutralization of CRLF Sequences (CVE-2024-48868) | Tenable OT Security | Tenable.ot | 2025/12/11 | 2026/2/24 | high |
| 505025 | Qnap QTS and QuTS hero Out-of-bounds Read (CVE-2025-54166) | Tenable OT Security | Tenable.ot | 2026/1/20 | 2026/2/4 | medium |
| 504957 | Qnap QTS and QuTS hero Out-of-bounds Write (CVE-2024-38638) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | low |
| 502529 | Qnap QTS Stack-based Buffer Overflow (CVE-2023-41278) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | high |
| 502550 | Qnap QuTS hero Cross-site Scripting (CVE-2020-2496) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | medium |
| 502615 | Qnap QTS Heap-based Buffer Overflow (CVE-2023-50364) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | high |
| 504819 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-30267) | Tenable OT Security | Tenable.ot | 2025/12/9 | 2026/2/25 | medium |
| 505001 | Qnap QTS and QuTS hero Improper Neutralization of Special Elements used in an OS Command (CVE-2023-34980) | Tenable OT Security | Tenable.ot | 2026/1/19 | 2026/2/5 | high |
| 505018 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-53590) | Tenable OT Security | Tenable.ot | 2026/1/20 | 2026/2/4 | medium |
| 505140 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-66274) | Tenable OT Security | Tenable.ot | 2026/2/12 | 2026/2/13 | medium |
| 505362 | Qnap QTS and QuTS hero OS Command Injection (CVE-2026-24719) | Tenable OT Security | Tenable.ot | 2026/6/15 | 2026/6/22 | high |
| 502496 | Qnap QTS Out-of-bounds Write (CVE-2023-41273) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | high |
| 502538 | Qnap QTS Stack-based Buffer Overflow (CVE-2023-50361) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | high |
| 502543 | Qnap QTS Out-of-bounds Write (CVE-2023-32972) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | high |
| 502607 | Qnap QTS Out-of-bounds Write (CVE-2021-28816) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | high |
| 502618 | Qnap QTS Stack-based Buffer Overflow (CVE-2024-27130) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | high |
| 502569 | Qnap QTS Stack-based Buffer Overflow (CVE-2023-41279) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | high |
| 502608 | Qnap QTS Out-of-bounds Write (CVE-2021-34343) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | high |
| 502627 | Qnap QTS Out-of-bounds Write (CVE-2023-32973) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | high |
| 502580 | Qnap QTS Out-of-bounds Write (CVE-2023-32971) | Tenable OT Security | Tenable.ot | 2024/10/16 | 2024/10/17 | high |
| 505898 | Qnap QuTS hero NULL Pointer Dereference (CVE-2025-62850) | Tenable OT Security | Tenable.ot | 2026/7/31 | 2026/8/3 | medium |
| 505220 | Qnap QTS and QuTS NULL Pointer Dereference (CVE-2025-47205) | Tenable OT Security | Tenable.ot | 2026/3/9 | 2026/3/10 | medium |
| 504849 | Qnap QTS and QuTS hero Improper Handling of URL Encoding (CVE-2024-48866) | Tenable OT Security | Tenable.ot | 2025/12/11 | 2026/2/24 | low |
| 505910 | Qnap QTS and QuTS hero Stack-based Buffer Overflow (CVE-2025-62858) | Tenable OT Security | Tenable.ot | 2026/7/31 | 2026/8/3 | medium |
| 505027 | Qnap QTS and QuTS hero Allocation of Resources Without Limits or Throttling (CVE-2025-57705) | Tenable OT Security | Tenable.ot | 2026/1/20 | 2026/2/4 | medium |
| 504994 | Qnap QTS and QuTs hero Improper Neutralization of Input During Web Page Generation (CVE-2023-32969) | Tenable OT Security | Tenable.ot | 2026/1/19 | 2026/2/5 | medium |
