Known Vulnerabilities for Qvr Guard by Qnap
Listed below are 5 of the newest known vulnerabilities associated with "Qvr Guard" by "Qnap".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-85390 json | Checkmate through 3.11.0 omits the isAllowed role guard middleware on maintenance-window, notification, and check-deletion ro... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-84809 json | Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding __pycache__... | Not Provided | 2026-09-02 | 2026-09-02 |
| CVE-2026-82749 json | Incorrect Authorization vulnerability in ash-project ash widens a relationship's parent(...) scoping filter to match unintend... | Not Provided | 2026-09-01 | 2026-09-01 |
| CVE-2026-82744 json | Not Failing Securely (Failing Open) vulnerability in ash-project ash skips an Ash.Reactor change when the guard controlling i... | Not Provided | 2026-09-01 | 2026-09-01 |
| CVE-2026-82673 json | Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in ash-project ash_admin allows wr... | Not Provided | 2026-08-31 | 2026-08-31 |
| CVE-2026-82651 json | SiYuan before v3.8.1 does not apply the IsForbiddenAbsPath guard (introduced in GHSA-c8r8-95hg-mp34) to the /history/*path an... | Not Provided | 2026-08-30 | 2026-08-31 |
| CVE-2026-82638 json | jina-ai reader disables its private-address guard outside Google Cloud deployments, allowing unauthenticated attackers to per... | Not Provided | 2026-08-30 | 2026-09-01 |
| CVE-2026-82247 json | gitoxide's gix-url crate (<= 0.32.0, fixed in 0.37.1) uses a hand-rolled URL parser that does not treat '?' or '#' as termina... | Not Provided | 2026-08-28 | 2026-08-28 |
| CVE-2026-82234 json | SiYuan versions before v3.8.1 contain a server-side request forgery vulnerability in the http_request and web_fetch agent too... | Not Provided | 2026-08-28 | 2026-08-28 |
| CVE-2026-81643 json | Incorrect Authorization vulnerability in ash-project ash_graphql delivers GraphQL subscription payloads for records a subscri... | Not Provided | 2026-08-30 | 2026-08-31 |