CVE-2025-53405 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-52872

CVE-2025-52872 is a buffer overflow vulnerability reported to affect QNAP OS versions, notably QTS and QuTS hero. The issue is described as a buffer copy/overflow that enables a remote attacker who has a user account to modify memory or crash processes. Affected products include QTS and QuTS hero...

CVE-2025-52864 QTS, QuTS hero

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS...

CVE-2025-52864 QTS, QuTS hero

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS...

CVE-2025-52864

CVE-2025-52864 describes a buffer overflow in QNAP OS families (QTS and QuTS hero) due to a buffer copy without checking size. The flaw allows a remote attacker who has a user account to modify memory or crash affected processes, potentially impacting system stability and availability. Affected v...

CVE-2025-52863

CVE-2025-52863 is a buffer overflow vulnerability reported to affect multiple QNAP OS versions. When a remote attacker obtains a user account, they can potentially modify memory or crash processes. Affected products and fixed versions are: QTS 5.2.7.3256 build 20250913 and later; QuTS hero h5.2.7...

CVE-2025-52431 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-52431

The CVE-2025-52431 issue is a NULL pointer dereference affecting QNAP QTS and QuTS hero. A remote attacker who gains an administrator account can trigger a DoS condition. Affected versions are QTS 5.2.7.3256 build 20250913 and later; QuTS hero h5.2.7.3256 build 20250913 and later; QuTS hero h5.3....

CVE-2025-52431 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-52430 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-52430 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-52426

CVE-2025-52426 describes a NULL pointer dereference affecting multiple QNAP OS versions (QTS, QuTS hero). The vulnerability requires an attacker with administrator privileges to trigger a Denial-of-Service. Affected versions include QTS 5.2.7.3256 build 20250913 and later, QuTS hero h5.2.7.3256 b...

CVE-2025-52426 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-47208

CVE-2025-47208 affects QNAP QTS and QuTS hero where an allocation of resources without limits or throttling can lead to a denial of service if a remote attacker obtains a user account. The issue is mitigated by fixes in QTS 5.2.6.3195 build 20250715 and later and QuTS hero h5.2.6.3195 build 20250...

CVE-2025-44013

CVE-2025-44013 affects QNAP QTS and QuTS hero prior to updates; the flaw is a NULL pointer dereference in multiple QNAP OS versions that enables a remote attacker with a user account to cause a denial-of-service (DoS). Fixed in QTS 5.2.6.3195 build 20250715 and later and QuTS hero h5.2.6.3195 bui...

CVE-2025-44013 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following...

PT-2026-1080

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.7.3256 build 20250913 QNAP versions prior to QuTS hero h5.2.7.3256 build 20250913 QNAP versions prior to QuTS hero h5.3.1.3250 build 20250912 Description A NULL pointer dereference issue exists in QNAP operating...

PT-2026-1100

Name of the Vulnerable Software and Affected Versions QNAP versions prior to 5.2.8.3332 build 20251128 Description A buffer overflow issue exists in QNAP operating system. A remote attacker gaining administrator access can exploit this to modify memory or cause processes to crash. Recommendations...

PT-2026-1073

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.2.7.3256 build 20250913 QNAP QuTS hero h5.2.7 versions prior to 5.2.7.3256 build 20250913 QNAP QuTS hero h5.3.1 versions prior to 5.3.1.3250 build 20250912 Description A NULL pointer dereference issue exists in...

PT-2026-1097

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.8.3332 build 20251128 QNAP versions prior to QuTS hero h5.2.8.3321 build 20251117 Description A path traversal issue exists in QNAP operating systems. A remote attacker with administrator privileges can potential...