NULL Pointer Dereference Vulnerability in Qsync Central by QNAP

CVE-2025-30263

What is CVE-2025-30263?

A NULL pointer dereference vulnerability has been identified in Qsync Central, allowing attackers with valid user accounts to exploit this flaw to execute a denial-of-service (DoS) attack. Timely application of security updates is crucial to protect systems from potential disruptions and ensure the integrity of services. The vulnerability has been addressed in version 5.0.0.0 and later, highlighting the need for users to upgrade their installations promptly.

References