CVE Watch—

CVE-2019-7194

QNAP Photo Station Path Traversal Vulnerability

CVSS

—

No CVSS

EPSS

83.1%

p100

KEV

YES

Jun 8, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

83.1%EPSS · 30 days83.1%

2026-09-162026-10-14

KEV catalog record

Product

QNAP / Photo Station

Vulnerability

QNAP Photo Station Path Traversal Vulnerability

Added to KEV

Jun 8, 2022

Remediate by

Jun 22, 2022

Known ransomware use

Yes

Summary description

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-7194

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2019-7195—

99.8%

KEV—80QNAP Photo Station Path Traversal Vulnerability—CVE-2022-27593—

99.8%

KEV—80QNAP Photo Station Externally Controlled Reference Vulnerability—CVE-2019-7192—

99.8%

KEV—80QNAP Photo Station Improper Access Control Vulnerability—