Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52424)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

The vulnerability of the smb2_lock() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the smb2lock function in the Linux operating system is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of Juniper Networks Junos OS, a flow processing demon for operating systems, in network interfaces of the SRX series and MX routers, allowing attackers to cause service interruptions.

The vulnerability of Juniper Networks Junos OS for network interface cards of the SRX series and routers of the MX series in processing flow data in operating systems allows for a memory reclamation error to occur. Exploiting this vulnerability can enable a malicious actor to cause service...

Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52862)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

The vulnerability of the SMB Server component in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the SMB Server component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

Qnap QTS and QuTS hero Improper Limitation of a Pathname to a Restricted Directory (CVE-2025-47211)

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the...

Qnap QTS and QuTS hero Out-of-bounds Write (CVE-2024-53697)

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory. We have already fixed the vulnerability in the following versions...

Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52855)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

Critical Photon OS Security Update - PHSA-2026-5.0-91-0741

Updates of 'linux', 'linux-esx', 'python3-urllib3' packages of Photon OS have been released...

TOA TRIFORA 3 Series Operating System Command Injection Vulnerability

The TOA TRIFORA 3 Series is a series of network cameras produced by the Japanese company TOA. The TOA TRIFORA 3 Series has a vulnerability related to operating system command injection. This vulnerability stems from a flaw in the operating system’s command injection mechanism, which may allow for...

Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52860)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000817)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000817 advisory. The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service host OS panic or hang by...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000901)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000901 advisory. arch/x86/kvm/vmx.c in the Linux kernel through 4.9 mismanages the BP and OF exceptions, which allows guest OS users to cause a denial of service guest OS crash by...

Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-47214)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001534)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001534 advisory. arch/powerpc/kvm/book3srtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via...

Qnap QTS and QuTS Hero Improper Neutralization of Special Elements used in a Command (CVE-2025-22481)

A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS...

Qnap QTS and QuTS hero Improper Link Resolution Before File Access (CVE-2024-53691)

A link following vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the file system to unintended locations. We have already fixed the vulnerability in the following...

Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-48727)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

PT-2026-3199

The vulnerability, if exploited, could allow an authenticated miscreant OS Standard User to trick Process Optimization services into loading arbitrary code and escalate privileges to OS System, potentially resulting in complete compromise of the Model Application Server...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001047)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001047 advisory. arch/x86/kvm/vmx.c in the Linux kernel through 4.6.3 mishandles the APICv on/off state, which allows guest OS users to obtain direct APIC MSR access on the host OS,...