QNAP Systems Inc. QcalAgent
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-41544 | 1.1.x – < 1.1.10 | Path Traversal leading to Arbitrary File Move, Docker Escape, and Host RCE in /calapi/renameUpload endpoint | HIGH 8.7 | 0.4 % | ||
| CVE-2024-27123 | 1.1.0 – < 1.1.9 | QcalAgent | MEDIUM 5.2 | 0.2 % | ||
| CVE-2023-41289 | 1.1.x – < 1.1.8 | QcalAgent | HIGH 8.8 | 1.1 % | ||
| CVE-2021-38678 | unspecified – < 1.1.7 | Open Redirect Vulnerability in QcalAgent | MEDIUM 6.1 | 0.6 % | ||
| CVE-2021-38677 | unspecified – < 1.1.7 | Reflected XSS Vulnerability in QcalAgent | MEDIUM 6.1 | 0.7 % |