QNAP Qvr Pro vulnerabilities

6 CVEs affecting QNAP Qvr Pro, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-22898, published 2026-03-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-38692, published 2022-01-14. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We…
CVE-2021-38691, published 2022-01-14. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We…
CVE-2021-38690, published 2022-01-14. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We…
CVE-2021-38689, published 2022-01-14. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We…
CVE-2021-38682, published 2022-01-14. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We…
CVE-2026-22898, published 2026-03-20. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. A missing authentication for critical function vulnerability has been reported to affect QVR Pro. The remote attackers can then exploit the vulnerability to gain access to the system. We have…