Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52866)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-52866

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-52866

CVE-2025-52866 covers a NULL pointer dereference affecting QNAP QTS and QuTS Hero. The vulnerability requires an attacker with an administrator account to trigger a DoS. Fixed versions are QTS 5.2.6.3195 build 20250715 and later and QuTS Hero h5.2.6.3195 build 20250715 and later.