QNAP Systems Inc. Qsync Central
68 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-41541 | 5.0.x – < 5.0.0.7 ; 5.1.x – < 5.1.0.3 ; 5.2.x – < 5.2.0.5 ; … | Symlink creation in qsyncsrv.cgi | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-26243 | 5.0.x – < 5.0.0.6 ; 5.1.x – < 5.1.0.2 ; 5.2.x – < 5.2.0.4 | Arbitrary Folder Deletion in Qsync Central 5.0.0.5 | HIGH 7.2 | 0.4 % | ||
| CVE-2026-24718 | 5.0.x – < 5.0.0.7 ; 5.1.x – < 5.1.0.3 ; 5.2.x – < 5.2.0.5 ; … | Path Traversal Vulnerability in Qsync Central's qsyncsrv.cgi | MEDIUM 5.3 | 0.4 % | ||
| CVE-2025-29897 | 5.0.x – < 5.0.0.4 | Stack-based Buffer Overflow in qsyncsrv.cgi | LOW 2.3 | 0.3 % | ||
| CVE-2025-29896 | 5.0.x – < 5.0.0.4 | NULL Pointer Dereference in qsyncsrv.cgi | LOW 2.3 | 0.3 % | ||
| CVE-2025-29895 | 5.0.x – < 5.0.0.4 | NULL Pointer Dereference in qsyncsrv.cgi | LOW 2.3 | 0.3 % | ||
| CVE-2025-30266 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | LOW 0.6 | 0.4 % | ||
| CVE-2025-30269 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | LOW 0.6 | 0.3 % | ||
| CVE-2025-30276 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | MEDIUM 4.9 | 0.6 % | ||
| CVE-2025-47209 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | LOW 1.3 | 0.4 % | ||
| CVE-2025-48722 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | LOW 1.3 | 0.4 % | ||
| CVE-2025-48723 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | LOW 0.6 | 0.4 % | ||
| CVE-2025-48724 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | LOW 0.6 | 0.4 % | ||
| CVE-2025-52868 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | LOW 0.6 | 0.3 % | ||
| CVE-2025-52869 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | LOW 0.6 | 0.5 % | ||
| CVE-2025-52870 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | LOW 0.6 | 0.4 % | ||
| CVE-2025-53598 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | LOW 0.6 | 0.5 % | ||
| CVE-2025-54146 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | LOW 1.3 | 0.5 % | ||
| CVE-2025-54147 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | LOW 1.3 | 0.4 % | ||
| CVE-2025-54148 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | LOW 1.3 | 0.5 % | ||
| CVE-2025-54149 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | MEDIUM 4.9 | 0.3 % | ||
| CVE-2025-54150 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | MEDIUM 4.9 | 0.3 % | ||
| CVE-2025-54151 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | MEDIUM 4.9 | 0.3 % | ||
| CVE-2025-54152 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | LOW 1.3 | 0.4 % | ||
| CVE-2025-54170 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | MEDIUM 4.9 | 0.6 % | ||
| CVE-2025-57708 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | LOW 2.3 | 0.5 % | ||
| CVE-2025-57709 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | LOW 1.3 | 0.6 % | ||
| CVE-2025-57710 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | LOW 3.6 | 0.5 % | ||
| CVE-2025-57711 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | LOW 3.6 | 0.5 % | ||
| CVE-2025-58467 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | LOW 1.3 | 0.5 % | ||
| CVE-2025-58470 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | LOW 1.3 | 0.6 % | ||
| CVE-2025-58471 | 5.2.x.x – < 5.2.0.1 ( 2025/12/21 ) | Qsync Central | LOW 1.2 | 0.5 % | ||
| CVE-2025-58472 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | LOW 1.2 | 0.6 % | ||
| CVE-2025-68406 | 5.0.x.x – < 5.0.0.4 ( 2026/01/20 ) | Qsync Central | LOW 1.3 | 0.6 % | ||
| CVE-2025-57712 | 5.0.x.x – < 5.0.0.3 ( 2025/08/28 ) | Qsync Central | MEDIUM 4.0 | 0.5 % | ||
| CVE-2025-54153 | 5.0.0 – < 5.0.0.2 ( 2025/07/31 ) | Qsync Central | HIGH 8.6 | 0.4 % | ||
| CVE-2025-53595 | 5.0.0 – < 5.0.0.2 ( 2025/07/31 ) | Qsync Central | HIGH 8.6 | 0.4 % | ||
| CVE-2025-52867 | 5.0.0 – < 5.0.0.2 ( 2025/07/31 ) | Qsync Central | MEDIUM 6.0 | 0.4 % | ||
| CVE-2025-47210 | 5.0.0 – < 5.0.0.2 ( 2025/07/31 ) | Qsync Central | MEDIUM 5.3 | 0.5 % | ||
| CVE-2025-44014 | 4.x – < 5.0.0.1 ( 2025/07/09 ) | Qsync Central | HIGH 7.1 | 0.5 % | ||
| CVE-2025-44012 | 5.0.0 – < 5.0.0.2 ( 2025/07/31 ) | Qsync Central | HIGH 7.1 | 0.5 % | ||
| CVE-2025-44011 | 4.x – < 5.0.0.1 ( 2025/07/09 ) | Qsync Central | MEDIUM 5.3 | 0.5 % | ||
| CVE-2025-44010 | 4.x – < 5.0.0.1 ( 2025/07/09 ) | Qsync Central | MEDIUM 5.3 | 0.5 % | ||
| CVE-2025-44009 | 4.x – < 5.0.0.1 ( 2025/07/09 ) | Qsync Central | MEDIUM 5.3 | 0.5 % | ||
| CVE-2025-44008 | 4.x – < 5.0.0.1 ( 2025/07/09 ) | Qsync Central | MEDIUM 5.3 | 0.5 % | ||
| CVE-2025-44007 | 4.x – < 5.0.0.1 ( 2025/07/09 ) | Qsync Central | HIGH 7.1 | 0.4 % | ||
| CVE-2025-44006 | 4.x – < 5.0.0.1 ( 2025/07/09 ) | Qsync Central | HIGH 7.1 | 0.4 % | ||
| CVE-2025-33040 | 4.x – < 5.0.0.1 ( 2025/07/09 ) | Qsync Central | HIGH 7.1 | 0.4 % | ||
| CVE-2025-33039 | 4.x – < 5.0.0.1 ( 2025/07/09 ) | Qsync Central | HIGH 7.1 | 0.4 % | ||
| CVE-2025-33034 | 4.x – < 5.0.0.1 ( 2025/07/09 ) | Qsync Central | MEDIUM 5.3 | 0.5 % | ||
| CVE-2025-33038 | 4.5.x.x – < 4.5.0.7 ( 2025/04/23 ) | Qsync Central | HIGH 7.2 | 0.5 % | ||
| CVE-2025-33037 | 4.5.x.x – < 4.5.0.7 ( 2025/04/23 ) | Qsync Central | HIGH 7.2 | 0.5 % | ||
| CVE-2025-33036 | 4.5.x.x – < 4.5.0.7 ( 2025/04/23 ) | Qsync Central | HIGH 7.2 | 0.5 % | ||
| CVE-2025-33033 | 4.5.x.x – < 4.5.0.7 ( 2025/04/23 ) | Qsync Central | HIGH 7.2 | 0.5 % | ||
| CVE-2025-30278 | 4.5.x.x – < 4.5.0.7 ( 2025/04/23 ) | Qsync Central | HIGH 8.3 | 0.2 % | ||
| CVE-2025-30277 | 4.5.x.x – < 4.5.0.7 ( 2025/04/23 ) | Qsync Central | HIGH 8.3 | 0.2 % | ||
| CVE-2025-30275 | 4.5.x.x – < 4.5.0.7 ( 2025/04/23 ) | Qsync Central | MEDIUM 5.3 | 0.4 % | ||
| CVE-2025-30263 | 5.0.x.x – < 5.0.0.0 ( 2025/06/13 ) | Qsync Central | MEDIUM 5.3 | 0.5 % | ||
| CVE-2025-30262 | 5.0.x.x – < 5.0.0.0 ( 2025/06/13 ) | Qsync Central | MEDIUM 5.3 | 0.5 % | ||
| CVE-2025-30261 | 5.0.x.x – < 5.0.0.0 ( 2025/06/13 ) | Qsync Central | HIGH 7.1 | 0.5 % | ||
| CVE-2025-30260 | 4.5.x.x – < 4.5.0.7 ( 2025/04/23 ) | Qsync Central | HIGH 7.1 | 0.5 % | ||
| CVE-2025-29898 | 4.5.x.x – < 4.5.0.7 ( 2025/04/23 ) | Qsync Central | MEDIUM 6.0 | 0.5 % | ||
| CVE-2025-29894 | 4.5.x.x – < 4.5.0.7 ( 2025/04/23 ) | Qsync Central | HIGH 7.5 | 0.5 % | ||
| CVE-2025-29893 | 4.5.x.x – < 4.5.0.7 ( 2025/04/23 ) | Qsync Central | HIGH 7.5 | 0.5 % | ||
| CVE-2025-29892 | 4.5.x.x – < 4.5.0.6 ( 2025/03/20 ) | Qsync Central | HIGH 8.7 | 0.5 % | ||
| CVE-2025-22482 | 4.5.x.x – < 4.5.0.6 ( 2025/03/20 ) | Qsync Central | LOW 2.3 | 0.4 % | ||
| CVE-2024-50404 | 4.4.x.x – < 4.4.0.16_20240819 ( 2024/08/19 ) | Qsync Central | MEDIUM 6.8 | 1.4 % | ||
| CVE-2023-47564 | 4.4.x.x – < 4.4.0.15 ( 2024/01/04 ) ; 4.3.x.x – < 4.3.0.11 ( 2024/01/11 ) | Qsync Central | HIGH 8.1 | 1.0 % |