CVE-2025-62852

QTS, QuTS hero

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: QTS 5.2.8.3332 build 20251128 and later

CVSS 4.0 · 1.2 Low EPSS < 1% KEV · Not listed

Vendors

Qnap

Products

Qts Quts Hero

CVE-2025-9110

QTS, QuTS hero

An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following versions: QTS 5.2.8.3332 build 20251128 and later QuTS hero h5.2.8.3321 build 20251117 and later QuTS hero h5.3.1.3250 build 20250912 and later

CVSS 4.0 · 2.7 Low EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems Inc.

Products

Qts Quts Hero Qts and 1 more

CVE-2025-62857

QuMagie

A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QuMagie 2.8.1 and later

CVSS 4.0 · 2.2 Low EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems Inc.

Products

Qumagie Qumagie

CVE-2025-53589

QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.1.3250 build 20250912 and later

CVSS 4.0 · 1.2 Low EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems Inc.

Products

Qts Quts Hero Qts and 1 more

CVE-2025-53590

QTS

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: QTS 5.2.7.3256 build 20250913 and later

CVSS 4.0 · 1.2 Low EPSS < 1% KEV · Not listed

Vendors

Qnap

Products

Qts Quts Hero

CVE-2025-53591

QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.1.3250 build 20250912 and later

CVSS 4.0 · 1.2 Low EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems Inc.

Products

Qts Quts Hero Qts and 1 more

CVE-2025-53592

QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.1.3250 build 20250912 and later

CVSS 4.0 · 1.3 Low EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems Inc.

Products

Qts Quts Hero Qts and 1 more

CVE-2025-53593

QTS, QuTS hero

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.1.3250 build 20250912 and later

CVSS 4.0 · 1.2 Low EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems Inc.

Products

Qts Quts Hero Qts and 1 more

CVE-2025-53596

QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.1.3250 build 20250912 and later

CVSS 4.0 · 1.2 Low EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems Inc.

Products

Qts Quts Hero Qts and 1 more

CVE-2025-53597

License Center

A buffer overflow vulnerability has been reported to affect License Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: License Center 2.0.36 and later

CVSS 4.0 · 1.2 Low EPSS < 1% KEV · Not listed

Vendors

Qnap

Products

License Center

CVE-2025-52871

License Center

An out-of-bounds read vulnerability has been reported to affect License Center. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following version: License Center 2.0.36 and later

CVSS 4.0 · 1.3 Low EPSS < 1% KEV · Not listed

Vendors

Qnap

Products

License Center

CVE-2025-44013

QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.6.3195 build 20250715 and later QuTS hero h5.2.6.3195 build 20250715 and later

CVSS 4.0 · 1.3 Low EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems Inc.

Products

Qts Quts Hero Qts and 1 more

CVE-2025-52426

QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.1.3250 build 20250912 and later

CVSS 4.0 · 1.2 Low EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems Inc.

Products

Qts Quts Hero Qts and 1 more

CVE-2025-52430

QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.1.3250 build 20250912 and later

CVSS 4.0 · 1.2 Low EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems Inc.

Products

Qts Quts Hero Qts and 1 more

CVE-2025-52431

QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.1.3250 build 20250912 and later

CVSS 4.0 · 1.2 Low EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems Inc.

Products

Qts Quts Hero Qts and 1 more

CVE-2025-53405

QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.1.3250 build 20250912 and later

CVSS 4.0 · 1.2 Low EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems Inc.

Products

Qts Quts Hero Qts and 1 more

CVE-2025-53414

QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.1.3250 build 20250912 and later

CVSS 4.0 · 1.2 Low EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems Inc.

Products

Qts Quts Hero Qts and 1 more

CVE-2025-52863

QTS, QuTS hero

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.0.3192 build 20250716 and later

CVSS 4.0 · 1.3 Low EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems Inc.

Products

Qts Quts Hero Qts and 1 more

CVE-2025-52864

QTS, QuTS hero

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.0.3192 build 20250716 and later

CVSS 4.0 · 1.3 Low EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems Inc.

Products

Qts Quts Hero Qts and 1 more

CVE-2025-52872

QTS, QuTS hero

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.0.3192 build 20250716 and later

CVSS 4.0 · 1.3 Low EPSS < 1% KEV · Not listed

Vendors

Qnap Qnap Systems Inc.

Products

Qts Quts Hero Qts and 1 more