PHP Vulnerability Responses by Company

QNAP

Global cloud / infrastructure
Aliases / services
QNAP / 威聯通 / 威联通 / QTS / QuTS hero / QuTScloud / キューナップ
Official website
https://www.qnap.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

QTS

Response status
Fix available; update required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

NAS, storage and surveillance systems.

Affected: 6.1.0 / 5.2.11 and earlier. QSA-26-18 lists fix 6.1.0.3656 build 20261023 / 5.2.11.3661 build 20261023.

Scope: Release availability does not mean your device is already updated.

What users should do

Install the appropriate fixed release for your model/branch.

Official service URL

Source URLs

  1. QSA-26-18: affected products and mitigationhttps://www.qnap.com/en/security-advisory/qsa-26-18Response evidence

QuTS hero

Response status
Fix available; update required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Affected: h6.1.0 / h6.0.x / h5.2.11 and earlier. QSA-26-18 lists fix h6.1.0.3656 / h6.0.2.3656 / h5.2.11.3661 (all build 20261023).

Scope: Release availability does not mean your device is already updated.

What users should do

Install the appropriate fixed release for your model/branch.

Source URLs

  1. QSA-26-18: affected products and mitigationhttps://www.qnap.com/en/security-advisory/qsa-26-18Response evidence

QuTScloud

Response status
Fix available; update required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Affected: c5.2.9 and earlier. QSA-26-18 lists fix c5.2.9.3661 build 20261023.

Scope: Release availability does not mean your device is already updated.

What users should do

Install the appropriate fixed release for your model/branch.

Source URLs

  1. QSA-26-18: affected products and mitigationhttps://www.qnap.com/en/security-advisory/qsa-26-18Response evidence

Notes Station 3

Response status
Fix in development
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Affected: 3.9.14 and earlier. No fixed version listed yet.

Scope: Release availability does not mean your device is already updated.

What users should do

Remove internet exposure, restrict trusted access and follow updates.

Source URLs

  1. QSA-26-18: affected products and mitigationhttps://www.qnap.com/en/security-advisory/qsa-26-18Response evidence

QNE (ADRA)

Response status
Fix in development
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Affected: 1.0.7 and earlier. No fixed version listed yet.

Scope: Release availability does not mean your device is already updated.

What users should do

Remove internet exposure, restrict trusted access and follow updates.

Source URLs

  1. QSA-26-18: affected products and mitigationhttps://www.qnap.com/en/security-advisory/qsa-26-18Response evidence

QVR Surveillance (ARM32)

Response status
Fix available; update required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Affected: 3.0.3 and earlier (ARM32 models). QSA-26-18 lists fix 3.0.3.1756.

Scope: Release availability does not mean your device is already updated.

What users should do

Install the appropriate fixed release for your model/branch.

Source URLs

  1. QSA-26-18: affected products and mitigationhttps://www.qnap.com/en/security-advisory/qsa-26-18Response evidence

TVR OS

Response status
Fix available; update required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Affected: 1.0.4 and earlier. QSA-26-18 lists fix 1.0.5.

Scope: Release availability does not mean your device is already updated.

What users should do

Install the appropriate fixed release for your model/branch.

Source URLs

  1. QSA-26-18: affected products and mitigationhttps://www.qnap.com/en/security-advisory/qsa-26-18Response evidence
Related official sources
  1. QSA-26-18: affected products and mitigationOfficial notice

Comments