Discoveries Timeline

2026

15 advisories
🔒
CVE-2026-50619 Unauthenticated remote code execution in Qfiling
🔒
CVE-2026-57604 Unauthenticated remote code execution in QuTS hero
🔒
CVE-2026-57606 Unauthenticated remote code execution in HBS 3 Hybrid Backup Sync, Qfiling
🔒
CVE-2026-57607 Unauthenticated remote code execution in HBS 3 Hybrid Backup Sync, Qfiling
🔒
CVE-2026-57605 Unauthenticated remote code execution in QuTS hero
🔒
CVE-2026-58667 Unauthenticated remote code execution in Media Streaming add-on
🔒
CVE-2026-63590 Unauthenticated remote code execution in QuTS hero
Jul 1 🔒
CVE-2026-63591 Unauthenticated remote code execution in QuTS hero
Jul 1 🔒
CVE-2026-63595 Unauthenticated remote code execution in QuTS hero
Jul 1 🔒
CVE-2026-63609 Unauthenticated remote code execution in myQNAPcloud Link
Jul 1 🔒
CVE-2026-63610 Unauthenticated remote code execution in myQNAPcloud Link
Jul 1 🔒
CVE-2026-63067 QNAP Qhora-322 WAN Interface Bypass Vulnerability
Jul 1 🔒
CVE-2026-62412 QNAP Qhora-322 Improper Authentication Vulnerability
Jul 1 🔒
CVE-2026-62396 QNAP Qhora-322 Remote Code Execution Vulnerability
Jul 1 🔒
CVE-2025-59384 Qnap NAS pre-auth RCE
Mar 31

2025

2 advisories
🔒
CVE-2025-59387 QNAP Package Unauthenticated Remote Execution
Nov 16 🔒
CVE-2025-52425 CVE-2025-52425
Aug 1

2024

2 advisories , 1 award
🏆
Master of Pwn in Pwn2Own Ireland (IoT) 2024
Oct 23 🔒
CVE-2024-27124 CVE-2024-27124
Jun 1 🔒
CVE-2024-38641 CVE-2024-38641
Jun 1

2023

2 advisories , 1 award
🏆
Master of Pwn in Pwn2Own Toronto (IoT) 2023
Oct 23 🔒
CVE-2023-47567 CVE-2023-47567
Jun 1 🔒
CVE-2023-47568 CVE-2023-47568
Jun 1