CVE-2025-52862

Name of the Vulnerable Software and Affected Versions QNAP versions prior to 5.2.6.3195 build 20250715 QNAP QuTS hero versions prior to 5.2.6.3195 build 20250715

Description A flaw exists where a remote attacker, having obtained administrator privileges, can trigger a denial-of-service (DoS) condition due to a NULL pointer dereference. The issue involves accessing a memory location that has not been assigned a valid address, leading to a program crash or unexpected behavior.

Recommendations Update QNAP to version 5.2.6.3195 build 20250715 or later. Update QNAP QuTS hero to version 5.2.6.3195 build 20250715 or later.