NULL Pointer Dereference Vulnerability in Qsync Central by QNAP

CVE-2025-44008

What is CVE-2025-44008?

A vulnerability affecting Qsync Central allows a remote attacker with an active user account to exploit a NULL pointer dereference, potentially triggering a denial-of-service (DoS) attack. Users are advised to upgrade to version 5.0.0.1 or later to mitigate this risk. For more details, please refer to the QNAP security advisory.

References