NULL Pointer Dereference Vulnerability in Qsync Central by QNAP

CVE-2025-30262

What is CVE-2025-30262?

A NULL pointer dereference vulnerability has been identified in Qsync Central, allowing remote attackers with valid user accounts to exploit this issue. By taking advantage of this vulnerability, attackers can initiate a denial-of-service (DoS) attack, disrupting service availability. QNAP has addressed this vulnerability in Qsync Central version 5.0.0.0 released on June 13, 2025, and users are strongly encouraged to upgrade to this version or later to mitigate potential risks.

References