CVE Watch—

CVE-2019-7192

QNAP Photo Station Improper Access Control Vulnerability

CVSS

—

No CVSS

EPSS

88.1%

p100

KEV

YES

Jun 8, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

88.1%EPSS · 30 days88.2%

2026-09-162026-10-14

KEV catalog record

Product

QNAP / Photo Station

Vulnerability

QNAP Photo Station Improper Access Control Vulnerability

Added to KEV

Jun 8, 2022

Remediate by

Jun 22, 2022

Known ransomware use

Yes

Summary description

QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized access to the system.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-7192

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2019-7195—

99.8%

KEV—80QNAP Photo Station Path Traversal Vulnerability—CVE-2022-27593—

99.8%

KEV—80QNAP Photo Station Externally Controlled Reference Vulnerability—CVE-2019-7194—

99.7%

KEV—80QNAP Photo Station Path Traversal Vulnerability—