CVE-2018-19949CISA KEVEPSS p98.1%

CVE-2018-19949QNAP NAS File Station Command Injection Vulnerability

QNAP / Network Attached Storage (NAS)

Description

A command injection vulnerability affecting QNAP NAS File Station could allow remote attackers to run commands.

Scoring

CVSS 9.8 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS28.42% probability of exploitation · percentile 98.1% · 2026-10-05T12:00:23Z
Last modified2026-10-02

CISA KEV entry

Added to KEV: 2022-05-24

(incoming)1

TypeTargetConfidenceTier
KEVEntryQNAP NAS File Station Command Injection Vulnerabilitykev-cve-2018-199490%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
QNAP Network-Attached Storage (NAS) Command Injection Vulnerability
CVE
QNAP NAS File Station Cross-Site Scripting Vulnerability
CVE
QNAP QTS Improper Input Validation Vulnerability
CVE
QNAP Photo Station Improper Access Control Vulnerability
CVE
QNAP Photo Station Path Traversal Vulnerability
CVE
QNAP VioStor NVR OS Command Injection Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.