PT-2026-1069

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.6.3195 build 20250715 QNAP versions prior to QuTS hero h5.2.6.3195 build 20250715 Description A flaw exists where a remote attacker, having obtained a user account, could trigger a denial-of-service DoS condition...

QNAP Systems QTS和QNAP Systems QuTS hero 安全漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both a software with data storage and management capabilities from QNAP Systems, Inc. of Taiwan, China. A security vulnerability exists in QNAP Systems QTS and QNAP Systems QuTS hero that stems from an unlimited flow or throttling of resource...

PT-2026-1075

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.7.3256 build 20250913 QNAP versions prior to QuTS hero h5.2.7.3256 build 20250913 QNAP versions prior to QuTS hero h5.3.0.3192 build 20250716 Description A buffer overflow issue exists in QNAP operating systems. ...

QNAP Systems QuTS hero和QNAP Systems QTS 安全漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both a software with data storage and management capabilities from QNAP Systems Taiwan, China. A security vulnerability exists in QNAP Systems QuTS hero and QNAP Systems QTS that originates from a buffer overflow that could result in modification of...

QNAP Systems QTS和QNAP Systems QuTS hero 代码问题漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both software with data storage and management capabilities from QNAP Systems of Taiwan, China. A code issue vulnerability exists in QNAP Systems QTS and QNAP Systems QuTS hero that stems from a null pointer dereference and could lead to a denial of...

PT-2026-1080

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.7.3256 build 20250913 QNAP versions prior to QuTS hero h5.2.7.3256 build 20250913 QNAP versions prior to QuTS hero h5.3.1.3250 build 20250912 Description A NULL pointer dereference issue exists in QNAP operating...

QNAP Systems QTS和QNAP Systems QuTS hero 代码问题漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are software with data storage and management capabilities from QNAP Systems of Taiwan, China. A code issue vulnerability exists in QNAP Systems QTS and QNAP Systems QuTS hero that stems from the presence of a null pointer dereference, which could lead ...

QNAP Systems QTS和QNAP Systems QuTS hero 缓冲区错误漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both a software with data storage and management capabilities from QNAP Systems, Inc. of Taiwan, China. A buffer error vulnerability exists in QNAP Systems QTS and QNAP Systems QuTS hero that originates from an out-of-bounds read and could result in...

QNAP Systems QuTS hero和QNAP Systems QTS 代码问题漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both software with data storage and management capabilities from QNAP Systems, a Taiwan, China-based company. A code issue vulnerability exists in QNAP Systems QuTS hero and QNAP Systems QTS that stems from a null pointer dereference and could lead ...

PT-2026-1097

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.8.3332 build 20251128 QNAP versions prior to QuTS hero h5.2.8.3321 build 20251117 Description A path traversal issue exists in QNAP operating systems. A remote attacker with administrator privileges can potential...

QNAP Systems QuTS hero和QNAP Systems QTS 代码问题漏洞

QNAP Systems QuTS hero and QNAP Systems QTS are both products of China Weilian Technology QNAP Systems.QNAP Systems QuTS hero is an operating system.QNAP Systems QTS is a software with data storage and management capabilities. A code issue vulnerability exists in QNAP Systems QuTS hero and QNAP...

QNAP Systems QTS和QNAP Systems QuTS hero 安全漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both software with data storage and management capabilities from QNAP Systems, a Taiwan, China-based company. A security vulnerability exists in QNAP Systems QTS and QNAP Systems QuTS hero that stems from an unrestricted resource allocation, which...

QNAP Systems QTS和QNAP Systems QuTS hero 安全漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both software with data storage and management capabilities from QNAP Systems, Inc. of Taiwan, China. A security vulnerability exists in QNAP Systems QTS and QNAP Systems QuTS hero that originates from the exposure of sensitive system information an...

QNAP Systems QTS和QNAP Systems QuTS hero 路径遍历漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both software with data storage and management capabilities from QNAP Systems of Taiwan, China. A path traversal vulnerability exists in QNAP Systems QTS and QNAP Systems QuTS hero that originates from path traversal and could result in reading...

QNAP Systems QTS和QNAP Systems QuTS hero 代码问题漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both software with data storage and management capabilities from QNAP Systems of Taiwan, China. A code issue vulnerability exists in QNAP Systems QTS and QNAP Systems QuTS hero that stems from a null pointer dereference and could lead to a denial of...

PT-2026-1072

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.2.7.3256 build 20250913 QNAP QuTS hero h5.2.7 versions prior to 5.2.7.3256 build 20250913 QNAP QuTS hero h5.3.1 versions prior to 5.3.1.3250 build 20250912 Description A NULL pointer dereference issue exists in QNA...

CVE-2025-9110: Exposure of Sensitive System Information to an Unauthorized Control Sphere

An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the followin...

CVE-2025-44013: NULL Pointer Dereference

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following...

CVE-2025-47208: Allocation of Resources Without Limits or Throttling

An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same...

CVE-2025-52431: NULL Pointer Dereference

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...