CVE-2019-7194
CISA KEV RANSOMWARE
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.
CISA Known Exploited Vulnerability
Vendor / Product
QNAP — Photo Station
Date Added
2022-06-08
Remediation Due
2022-06-22
Ransomware Use
CONFIRMED
https://nvd.nist.gov/vuln/detail/CVE-2019-7194