CVE-2018-19943
CISA KEV RANSOMWARE
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code.
CISA Known Exploited Vulnerability
Vendor / Product
QNAP — Network Attached Storage (NAS)
Date Added
2022-05-24
Remediation Due
2022-06-14
Ransomware Use
CONFIRMED
https://nvd.nist.gov/vuln/detail/CVE-2018-19943
Affected Software (16)
| Vendor | Product | Version |
|---|---|---|
| qnap | qts | < 4.2.6 |
| qnap | qts | 4.3.1.0013 – 4.3.3.1252 |
| qnap | qts | 4.3.4 – 4.3.4.1282 |
| qnap | qts | 4.3.6 – 4.3.6.1263 |
| qnap | qts | 4.4.0 – 4.4.1.1261 |
| qnap | qts | 4.4.2 – 4.4.2.1270 |
| qnap | qts | 4.2.6 |
| qnap | qts | 4.2.6 |
| qnap | qts | 4.2.6 |
| qnap | qts | 4.2.6 |
| qnap | qts | 4.2.6 |
| qnap | qts | 4.2.6 |
| qnap | qts | 4.2.6 |
| qnap | qts | 4.2.6 |
| qnap | qts | 4.2.6 |
| qnap | qts | 4.2.6 |
References & Advisories (2)
Vendor Advisory
US Government Resource