Approved changes feed: RSS · Atom

cpe:2.3:a:qnap:qts:5.1.x:*:*:*:*:*:*:*

part: a version: 5.1.x update: *

VendorQnap (a402dda4-b7da-50eb-b0f8-700e564ee87d)
ProductQts (9004baf2-b431-53ba-b074-38fcdcfcd981)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-32766 vulnerable 2026-06-08 06:37:23.915027 QTS, QuTS hero, QuTScloud
CRITICAL (10)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578 build 20231110 and later QTS 4.5.4.2627 build 20231225 and later QuTS hero h5.1.3.2578 build 20231110 and later QuTS hero h4.5.4.2626 build 20231225 and later QuTScloud c5.1.5.2651 and later
Published: 2024-04-26T15:00:43.258Z
Updated: 2024-08-02T02:20:35.334Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27130 vulnerable 2026-06-08 06:31:27.661499 QTS, QuTS hero
HIGH (7.2)
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520 and later QuTS hero h5.1.7.2770 build 20240520 and later
Published: 2024-05-21T16:08:46.881Z
Updated: 2024-08-02T00:27:59.262Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27129 vulnerable 2026-06-08 06:31:27.658954 QTS, QuTS hero
MEDIUM (6.4)
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520 and later QuTS hero h5.1.7.2770 build 20240520 and later
Published: 2024-05-21T16:08:40.115Z
Updated: 2024-08-02T00:27:59.066Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27128 vulnerable 2026-06-08 06:31:27.653165 QTS, QuTS hero
MEDIUM (6.4)
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520 and later QuTS hero h5.1.7.2770 build 20240520 and later
Published: 2024-05-21T16:08:34.365Z
Updated: 2024-08-02T00:27:59.337Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27127 vulnerable 2026-06-08 06:31:27.631605 QTS, QuTS hero
HIGH (7.2)
A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute arbitrary code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520 and later QuTS hero h5.1.7.2770 build 20240520 and later
Published: 2024-05-21T16:08:29.155Z
Updated: 2024-08-02T00:27:59.797Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21900 vulnerable 2026-06-08 06:29:32.496764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51365 vulnerable 2026-06-08 06:16:17.374002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.