Qnap QTS and QuTS hero Command Injection (CVE-2025-30264)

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145...

CVE-2025-30264

creationtimestamp| type| source ---|---|--- 2025-08-30 04:22:57+00:00| seen| Telegram/J9CPdIiTca0-Zf56YkGU188vJRhTMhnTu5Tc0EsW-D7TIRk...

CVE-2025-30264

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145...