CVE-2025-48730

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.2.6.3195 build 20250715 QNAP QuTS hero versions prior to 5.2.6.3195 build 20250715

Description A use of externally-controlled format string issue exists in QNAP operating systems. If an attacker obtains an administrator account, they may be able to obtain secret data or modify memory. The issue involves a format string, where external input controls the format.

Recommendations Update QTS to version 5.2.6.3195 build 20250715 or later. Update QuTS hero to version 5.2.6.3195 build 20250715 or later.