PT-2026-48362 · Qnap · Quts Hero+1

CVE-2025-66280

·

Published

2026-06-10

·

Updated

2026-07-07

CVSS v3.1

7.2

High

VectorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions QTS versions prior to 5.2.9.3410 build 20260214 QuTS hero versions prior to h5.2.9.3410 build 20260214 QuTS hero versions prior to h5.3.4.3500 build 20260520 QuTS hero versions prior to h6.0.0.3397 build 20260206
Description An integer overflow or wraparound occurs when an arithmetic operation attempts to create a numeric value that is too large to be represented within the available storage space. A remote attacker with administrator account access can exploit this issue to compromise system security.
Recommendations Update QTS to version 5.2.9.3410 build 20260214 or later. Update QuTS hero to version h5.2.9.3410 build 20260214 or later. Update QuTS hero to version h5.3.4.3500 build 20260520 or later. Update QuTS hero to version h6.0.0.3397 build 20260206 or later.

Fix

Integer Overflow

Stack Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-66280

Affected Products

Qts
Quts Hero