PT-2026-48362 · Qnap · Quts Hero+1
CVE-2025-66280
·
Published
2026-06-10
·
Updated
2026-07-07
CVSS v3.1
7.2
High
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
QTS versions prior to 5.2.9.3410 build 20260214
QuTS hero versions prior to h5.2.9.3410 build 20260214
QuTS hero versions prior to h5.3.4.3500 build 20260520
QuTS hero versions prior to h6.0.0.3397 build 20260206
Description
An integer overflow or wraparound occurs when an arithmetic operation attempts to create a numeric value that is too large to be represented within the available storage space. A remote attacker with administrator account access can exploit this issue to compromise system security.
Recommendations
Update QTS to version 5.2.9.3410 build 20260214 or later.
Update QuTS hero to version h5.2.9.3410 build 20260214 or later.
Update QuTS hero to version h5.3.4.3500 build 20260520 or later.
Update QuTS hero to version h6.0.0.3397 build 20260206 or later.
Fix
Integer Overflow
Stack Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Qts
Quts Hero