CVE-2021-32529: Qsan Sanos

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Command injection vulnerability in QSAN XEVO, SANOS allows remote unauthenticated attackers to execute arbitrary commands. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

Affected products

• Qsan Sanos: up to and including 2.0.0
• Qsan Xevo: before 1.2.0 (fixed in 1.2.0)

Published 2021-07-07. Last modified 2026-06-17.