PT-2025-40562
CVE-2025-48727
·
Published
2025-10-03
·
Updated
2025-10-08
Description by
CVSS 4.0
5.1
MediumMetricsAV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
QNAP versions prior to 5.2.6.3195 build 20250715
QNAP QuTS hero versions prior to 5.2.6.3195 build 20250715
Description
A flaw exists that could allow a remote attacker with administrator privileges to trigger a denial-of-service (DoS) condition. The issue is due to a NULL pointer dereference.
Recommendations
Update QNAP to version 5.2.6.3195 build 20250715 or later.
Update QNAP QuTS hero to version 5.2.6.3195 build 20250715 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾