Firetruck

CVE-2018-19953

KEV · Ransomware
Updated Oct 1, 2026 · PUBLISHED
View KEV entry →

Description

A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
QTSQNAP Systems Inc. / QTS>= unspecified, < 4.4.2.1231affected
QTSQNAP Systems Inc. / QTS>= unspecified, < 4.4.1.1201affected
QTSQNAP Systems Inc. / QTS>= unspecified, < 4.3.6.1218affected
QTSQNAP Systems Inc. / QTS>= unspecified, < 4.3.4.1190affected
QTSQNAP Systems Inc. / QTS>= unspecified, < 4.3.3.1161affected
QTSQNAP Systems Inc. / QTS>= unspecified, < 4.2.6affected