Product of QNAP

Photo Station

As of , 4 QNAP Photo Station vulnerabilities are on CISA's list of exploited vulnerabilities, 4 of them used in ransomware campaigns; 0 were added in 2026. Patch first: CVE-2019-7192.

Patch first

Patch first
#VulnerabilityProductOur groupListedDeadlineEPSS
1CVE-2019-7192Improper Access ControlQNAP Photo StationPatch this weekRansomware use; Metasploit module; EPSS 0.880.88
2CVE-2019-7194Path TraversalQNAP Photo StationPatch this weekRansomware use; Metasploit module; EPSS 0.830.83
3CVE-2019-7195Path TraversalQNAP Photo StationPatch this weekRansomware use; Metasploit module; EPSS 0.900.90
4CVE-2022-27593Externally Controlled ReferenceQNAP Photo StationPatch this weekRansomware use; EPSS 0.880.88

Added each year

12342022: 4420222023: nonenone20232024: nonenone20242025: nonenone20252026: nonenone2026
Entries CISA added each year, removed ones included. Source: CISA KEV.
Show the numbers
Periodentries added
20224
2023none
2024none
2025none
2026none

Used in ransomware