boxscore/security
VENDOR · referenceVendors · latest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

Qnap Systems

Vendor reference — Qnap Systems · sector: Other. Cumulative disclosure record across the archive.

Follow Qnap Systems — Atom feed

Career totals

Disclosures & known-exploited
All-timeYTD
CVEs2824
KEV entries40
Rate & severity
KEV/100Med CVSSMed EPSSCHML
14.36.1.004324147

KEV/100 = KEV entries ÷ CVEs × 100. Med CVSS / Med EPSS are medians over all disclosures. C/H/M/L = disclosures by CVSS severity band.

Monthly disclosures

Trend (by first-seen month, full archive): ▁▁▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁█▁▁

Last 12 months (new CVEs by first-seen day)
MonthNew CVEs
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-0624
2026-070
2026-080

Notable CVEs

Ranked by the published formula: KEV → EPSS → CVSS → CVE ID.

Notable (ranked)
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2018-199499.897.7CRITICALYES2022-05-24
CVE-2018-199536.197.6MEDIUMYES2022-05-24
CVE-2018-199435.496.9MEDIUMYES2022-05-24
CVE-2020-2506—78.9—YES2022-03-25
CVE-2026-228938.662.7HIGH—2026-06-10
CVE-2025-662738.661.6HIGH—2026-06-10
CVE-2025-662798.661.6HIGH—2026-06-10
CVE-2026-247196.159.4MEDIUM—2026-06-10
CVE-2026-440838.738.2HIGH—2026-06-09
CVE-2026-262411.338.2LOW—2026-06-10
CVE-2025-662816.938.0MEDIUM—2026-06-10
CVE-2025-628585.137.2MEDIUM—2026-06-09
CVE-2026-262401.337.0LOW—2026-06-10
CVE-2025-662805.136.4MEDIUM—2026-06-10
CVE-2026-262396.335.3MEDIUM—2026-06-10

Recent CVEs

Most recently seen
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2026-262411.338.2LOW—2026-06-10
CVE-2026-262401.337.0LOW—2026-06-10
CVE-2026-262396.335.3MEDIUM—2026-06-10
CVE-2026-262376.625.1MEDIUM—2026-06-10
CVE-2026-247246.226.8MEDIUM—2026-06-10
CVE-2026-247201.331.5LOW—2026-06-10
CVE-2026-247196.159.4MEDIUM—2026-06-10
CVE-2026-247171.232.5LOW—2026-06-10
CVE-2026-247161.226.1LOW—2026-06-10
CVE-2026-228991.331.5LOW—2026-06-10
CVE-2026-228938.662.7HIGH—2026-06-10
CVE-2025-662816.938.0MEDIUM—2026-06-10
CVE-2025-662805.136.4MEDIUM—2026-06-10
CVE-2025-662798.661.6HIGH—2026-06-10
CVE-2025-662769.221.6CRITICAL—2026-06-10

Products

This vendor's products with a reference page (≥2 disclosures), by CVE count. A monolithic vendor total dilutes signal; product pages sharpen it.

Products (by CVE count)
ProductCVEsKEV
QTS153
QuTS Hero130
File Station 560
QuMagie30

KEV entries

CISA Known Exploited Vulnerabilities (newest addition first)
CVEKEV addedCVSSEPSS %ileSeverity
CVE-2018-199532022-05-246.197.6MEDIUM
CVE-2018-199492022-05-249.897.7CRITICAL
CVE-2018-199432022-05-245.496.9MEDIUM
CVE-2020-25062022-03-25—78.9—

KEV timing

Fastest to KEV
CVEDays
CVE-2018-199430
CVE-2018-199490
CVE-2018-199530
CVE-2020-25060
Longest unpatched (KEV due date passed)
CVEDueDays over
CVE-2020-25062022-04-151587
CVE-2018-199432022-06-141527
CVE-2018-199492022-06-141527
CVE-2018-199532022-06-141527

Methodology

Rate statistics are arithmetic over published figures: KEV/100 = KEV entries ÷ CVEs × 100; medians are taken over this vendor's disclosures. Vendor names are normalized (case, punctuation, common aliases) before aggregation; monthly counts are keyed to first-seen day, the day this archive first observed the record, not the upstream publication date.

Raw counts are not comparable across vendors: disclosure practices, product breadth, and CNA conventions differ widely, so a larger number here does not mean less secure software. This is a reference page assembled from the public record — not a record of its own, and not a ranking of vendors by our judgment.

Sources. CVE records from the CVE Program (cvelistV5); enrichment from NVD (NIST); known-exploited status from the CISA KEV catalog; exploit probability from FIRST EPSS.