PT-2025-40563
CVE-2025-48728
·
Published
2025-10-03
·
Updated
2025-10-08
Description by
CVSS 4.0
5.1
MediumMetricsAV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
QNAP versions prior to QTS 5.2.6.3195 build 20250715
QNAP versions prior to QuTS hero h5.2.6.3195 build 20250715
Description
A flaw exists due to a NULL pointer dereference. If an attacker obtains administrator privileges, they may trigger a denial-of-service (DoS) condition.
Recommendations
Update QTS to version 5.2.6.3195 build 20250715 or later.
Update QuTS hero to version h5.2.6.3195 build 20250715 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾