# Qnap Quts Hero


- [CVE-2020-2509](https://insights.sbomify.com/CVE-2020-2509/): QNAP Network-Attached Storage (NAS) Command Injection (critical 9.8, exploited in the wild)
- [CVE-2024-32766](https://insights.sbomify.com/CVE-2024-32766/): QTS, QuTS hero, QuTScloud (critical 10.0)
- [CVE-2024-21899](https://insights.sbomify.com/CVE-2024-21899/): QTS, QuTS hero, QuTScloud (critical 9.8)
- [CVE-2023-23368](https://insights.sbomify.com/CVE-2023-23368/): QTS, QuTS hero, QuTScloud (critical 9.8)
- [CVE-2022-27596](https://insights.sbomify.com/CVE-2022-27596/): Vulnerability in QTS (critical 9.8)
- [CVE-2021-28802](https://insights.sbomify.com/CVE-2021-28802/): Command Injection Vulnerabilities in QTS and QuTS hero (critical 9.8)
- [CVE-2021-28804](https://insights.sbomify.com/CVE-2021-28804/): Command Injection Vulnerabilities in QTS and QuTS hero (critical 9.8)
- [CVE-2019-7198](https://insights.sbomify.com/CVE-2019-7198/): Command Injection Vulnerability in QTS and QuTS hero (critical 9.8)
- [CVE-2025-66277](https://insights.sbomify.com/CVE-2025-66277/): QTS, QuTS hero (critical 9.2)
- [CVE-2023-45025](https://insights.sbomify.com/CVE-2023-45025/): QTS, QuTS hero, QuTScloud (critical 9.0)
- [CVE-2024-21897](https://insights.sbomify.com/CVE-2024-21897/): QTS, QuTS hero (high 8.9)
- [CVE-2023-34974](https://insights.sbomify.com/CVE-2023-34974/): QTS, QuTS hero, QuTScloud, QVR, QES (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/products/qnap/quts-hero/