CVE-2025-52872

CVE-2025-52872 is a buffer overflow vulnerability reported to affect QNAP OS versions, notably QTS and QuTS hero. The issue is described as a buffer copy/overflow that enables a remote attacker who has a user account to modify memory or crash processes. Affected products include QTS and QuTS hero...

CVE-2025-52864 QTS, QuTS hero

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS...

CVE-2025-52864 QTS, QuTS hero

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS...

CVE-2025-52864

CVE-2025-52864 describes a buffer overflow in QNAP OS families (QTS and QuTS hero) due to a buffer copy without checking size. The flaw allows a remote attacker who has a user account to modify memory or crash affected processes, potentially impacting system stability and availability. Affected v...

CVE-2025-52863

CVE-2025-52863 is a buffer overflow vulnerability reported to affect multiple QNAP OS versions. When a remote attacker obtains a user account, they can potentially modify memory or crash processes. Affected products and fixed versions are: QTS 5.2.7.3256 build 20250913 and later; QuTS hero h5.2.7...

CVE-2025-52431

The CVE-2025-52431 issue is a NULL pointer dereference affecting QNAP QTS and QuTS hero. A remote attacker who gains an administrator account can trigger a DoS condition. Affected versions are QTS 5.2.7.3256 build 20250913 and later; QuTS hero h5.2.7.3256 build 20250913 and later; QuTS hero h5.3....

CVE-2025-52431 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-52431 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-52430 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-52430 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-52426 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-52426

CVE-2025-52426 describes a NULL pointer dereference affecting multiple QNAP OS versions (QTS, QuTS hero). The vulnerability requires an attacker with administrator privileges to trigger a Denial-of-Service. Affected versions include QTS 5.2.7.3256 build 20250913 and later, QuTS hero h5.2.7.3256 b...

CVE-2025-47208

CVE-2025-47208 affects QNAP QTS and QuTS hero where an allocation of resources without limits or throttling can lead to a denial of service if a remote attacker obtains a user account. The issue is mitigated by fixes in QTS 5.2.6.3195 build 20250715 and later and QuTS hero h5.2.6.3195 build 20250...

CVE-2025-44013 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following...

CVE-2025-44013

CVE-2025-44013 affects QNAP QTS and QuTS hero prior to updates; the flaw is a NULL pointer dereference in multiple QNAP OS versions that enables a remote attacker with a user account to cause a denial-of-service (DoS). Fixed in QTS 5.2.6.3195 build 20250715 and later and QuTS hero h5.2.6.3195 bui...

QNAP Systems QTS 代码问题漏洞

QNAP Systems QTS is a software with data storage and management capabilities from Taiwan, China-based QNAP Systems. A code issue vulnerability exists in QNAP Systems QTS that originates from a null pointer dereference and could lead to a denial of service attack...

PT-2026-1079

Name of the Vulnerable Software and Affected Versions QNAP versions prior to 5.2.7.3256 build 20250913 QNAP QuTS hero versions prior to 5.2.7.3256 build 20250913 QNAP QuTS hero versions prior to 5.3.1.3250 build 20250912 Description A NULL pointer dereference issue exists in QNAP operating system...

PT-2026-1076

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.7.3256 build 20250913 QNAP versions prior to QuTS hero h5.2.7.3256 build 20250913 QNAP versions prior to QuTS hero h5.3.0.3192 build 20250716 Description A buffer overflow condition exists in QNAP operating...

PT-2026-1096

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.8.3332 build 20251128 QNAP versions prior to QuTS hero h5.2.8.3321 build 20251117 Description A path traversal issue exists in QNAP operating systems. A remote attacker with administrator privileges can potential...

PT-2026-1084

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.7.3256 build 20250913 QNAP versions prior to QuTS hero h5.2.7.3256 build 20250913 QNAP versions prior to QuTS hero h5.3.1.3250 build 20250912 Description A buffer overflow condition exists in QNAP operating...