1
CVEs
0
Critical
1
High
0
KEV
0
PoC
0
Unpatched C/H
100.0%
Patch Rate
0.2%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
1
MEDIUM
0
LOW
0
Monthly CVE Trend
Affected Products (30)
Qts
204
Quts Hero
168
Qsync Central
61
File Station
50
Qutscloud
18
Photo Station
16
Video Station
11
Qumagie
10
Qvr
9
Qurouter
8
Q Center
7
Music Station
7
Hybrid Backup Sync
6
Notes Station 3
6
Helpdesk
5
License Center
5
Media Streaming Add On
5
Qulog Center
5
Multimedia Console
4
Qes
4
Download Station
3
Signage Station
3
Viostor Network Video Recorder
3
Netscaler Sdx Firmware
2
Qradar Security Information And Event Manager
2
Linux Enterprise Server
2
Workload Deployer
2
Enterprise Linux For Scientific Computing
2
Big Iq Security
2
Storwize V7000 Firmware
2
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-80975 | Stack memory corruption in the Linux kernel's qnap-mcu MFD driver allows a local low-privileged user on QNAP hardware to corrupt kernel stack memory, potentially enabling privilege escalation. The driver's qnap_mcu_exec() publishes an on-stack receive buffer to the serdev receive path, which runs asynchronously; when a command times out and the function returns, reply->data still points at the deallocated stack frame. A late MCU reply or unsolicited MCU message then overwrites whatever occupies that stack memory next, yielding C:H/I:H/A:H impact. No public exploit exists and EPSS is 0.20% (10th percentile), consistent with a kernel driver bug requiring physical or local QNAP hardware access. | HIGH | 7.8 | 0.2% | 39 |
|