QNAP Systems Inc. QcalAgent

• CVE-2026-41544 High 8.7 Path Traversal leading to Arbitrary File Move, Docker Escape, and Host RCE in /calapi/renameUpload endpoint 0.4%
• CVE-2024-27123 Medium 5.2 QcalAgent 0.2%
• CVE-2023-41289 Medium 6.3 QcalAgent 1.1%
• CVE-2021-38678 Medium 6.1 Open Redirect Vulnerability in QcalAgent 0.6%
• CVE-2021-38677 Medium 5.3 Reflected XSS Vulnerability in QcalAgent 0.7%