Firetruck

CVE-2018-19943

KEV · Ransomware
Updated Aug 13, 2026 · PUBLISHED
View KEV entry →

Description

A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
QTSQNAP Systems Inc. / QTS>= unspecified, < 4.4.2.1270affected
QTSQNAP Systems Inc. / QTS>= unspecified, < 4.4.1.1261affected
QTSQNAP Systems Inc. / QTS>= unspecified, < 4.3.6.1263affected
QTSQNAP Systems Inc. / QTS>= unspecified, < 4.3.4.1282affected
QTSQNAP Systems Inc. / QTS>= unspecified, < 4.3.3.1252affected
QTSQNAP Systems Inc. / QTS>= unspecified, < 4.2.6affected