CVE-2025-52424

A NULL pointer dereference vulnerability (CVE-2025-52424) affects QNAP QTS and QuTS hero operating systems. The issue can be triggered by an attacker with administrator privileges, allowing a remote DoS attack. Fixed versions are QTS 5.2.6.3195 build 20250715 and later and QuTS hero h5.2.6.3195 b...

CVE-2025-48730 QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerabili...

CVE-2025-48730 QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerabili...

EUVD-2025-32369

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerabili...

CVE-2025-48729

CVE-2025-48729 is a NULL pointer dereference affecting QNAP QTS and QuTS hero. The vulnerability requires an attacker with administrator privileges to cause a denial-of-service (DoS) on affected systems. Remediation applied in QTS 5.2.6.3195 build 20250715 and later, and QuTS hero h5.2.6.3195 bui...

CVE-2025-48729 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-48728 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-48728 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

EUVD-2025-32347

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-48727

The CVE-2025-48727 issue is a NULL pointer dereference in QNAP QTS and QuTS hero. A remote attacker with administrator privileges could cause a DoS. Affected versions are QTS and QuTS hero prior to the fixed release; remediation is to upgrade to QTS 5.2.6.3195 build 20250715 or later and QuTS her...

CVE-2025-48727 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

EUVD-2025-32348

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-48726

CVE-2025-48726 affects QNAP QTS and QuTS hero. A NULL pointer dereference vulnerability can be exploited by an attacker who has an administrator account to cause a denial-of-service (DoS). Affected products include QTS and QuTS hero releases prior to the patched versions. The published fix commit...

EUVD-2025-32350

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-47213 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

EUVD-2025-32351

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS...

CVE-2025-47212 QTS, QuTS hero

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS...

CVE-2025-47211

CVE-2025-47211 describes a path traversal vulnerability in QNAP QTS and QuTS hero. A remote attacker with administrator privileges could read arbitrary files or system data due to improper path handling. Affected versions: QTS 5.2.6.3195 build 20250715 and later; QuTS hero h5.2.6.3195 build 20250...

PT-2025-40583

Name of the Vulnerable Software and Affected Versions QNAP versions prior to 5.2.6.3195 build 20250715 QNAP QuTS hero versions prior to 5.2.6.3195 build 20250715 Description A flaw exists where a remote attacker, having obtained administrator privileges, can trigger a denial-of-service DoS...

PT-2025-40560

Name of the Vulnerable Software and Affected Versions QNAP versions prior to 5.2.6.3195 build 20250715 Description A flaw exists where a remote attacker, having obtained administrator privileges, could trigger a denial-of-service DoS condition due to a NULL pointer dereference. Recommendations...