CVE-2025-29882

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.2.5.3145 build 20250526 QNAP QuTS hero versions prior to h5.2.5.3138 build 20250519

Description A NULL pointer dereference issue exists in QNAP operating systems. A remote attacker gaining a user account can exploit this to launch a denial-of-service (DoS) attack.

Recommendations Update QTS to version 5.2.5.3145 build 20250526 or later. Update QuTS hero to version h5.2.5.3138 build 20250519 or later.