VendorsQNAPvideo_stationany version
Vulnerabilities

QNAP Video Station any version

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

20CVEs
CVE-2021-44056
Improper authentication in Video Station
Published 2022-05-05 · Modified
10.0EPSS 0.009
CVE-2023-34976
Video Station
Published 2023-10-13 · Modified
10.0EPSS 0.006
CVE-2021-44055
Information leakage in Video Station
Published 2022-05-05 · Modified
9.8EPSS 0.011
CVE-2021-28812
Command Injection Vulnerability in Video Station
Published 2021-06-03 · Modified
8.8EPSS 0.016
CVE-2023-34975
QTS, QuTS hero, QuTScloud
Published 2023-10-13 · Modified
8.8EPSS 0.012
CVE-2023-41288
Video Station
Published 2024-01-05 · Modified
8.8EPSS 0.011
CVE-2023-47563
Video Station
Published 2024-09-06 · Analyzed
8.8EPSS 0.010
CVE-2023-41287
Video Station
Published 2024-01-05 · Modified
8.8EPSS 0.005
CVE-2023-50360
Video Station
Published 2024-09-06 · Analyzed
8.8EPSS 0.004
CVE-2026-26244
SQLi#1 SQL Injection in class_videos.php _getFilters
Published 2026-10-15 · Analyzed
8.8EPSS 0.004
CVE-2026-26245
SQLi#2 SQL Injection in class_videos.php getSmartVideosByOffset
Published 2026-10-15 · Analyzed
8.8EPSS 0.004
CVE-2024-56804
Video Station
Published 2025-10-03 · Analyzed
8.8EPSS 0.003
CVE-2026-34015
Remote Code Execution in upload.php of Video Station
Published 2026-10-15 · Analyzed
8.7EPSS 0.004
CVE-2026-44084
Access Code Forgery in Video Station leading to unauthorized media access
Published 2026-10-15 · Analyzed
8.7EPSS 0.003
CVE-2025-66272
Arbitrary file deletion and remote code execution
Published 2026-10-15 · Analyzed
7.7EPSS 0.004
CVE-2025-66275
Remote code execution via command injection
Published 2026-10-15 · Analyzed
7.7EPSS 0.004
CVE-2024-14025
Video Station
Published 2026-03-11 · Analyzed
6.7EPSS 0.002
CVE-2024-14024
Video Station
Published 2026-03-11 · Analyzed
6.7EPSS 0.001
CVE-2023-34977
Video Station
Published 2023-10-13 · Modified
5.4EPSS 0.003
CVE-2019-7184
This cross-site scripting (XSS) vulnerability in Video Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Video Station to their latest versions.
Published 2019-12-05 · Modified
4.8EPSS 0.015