NULL Pointer Dereference Vulnerability in Qsync Central by QNAP
CVE-2025-44008

5.3MEDIUM

Key Information:

Vendor

QNAP
Status
Qsync Central
Vendor
CVE Published:
3 October 2025

What is CVE-2025-44008?

A vulnerability affecting Qsync Central allows a remote attacker with an active user account to exploit a NULL pointer dereference, potentially triggering a denial-of-service (DoS) attack. Users are advised to upgrade to version 5.0.0.1 or later to mitigate this risk. For more details, please refer to the QNAP security advisory.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Qsync Central 4.x < 5.0.0.1 ( 2025/07/09 )

References

https://www.qnap.com/en/security-advisory/qsa-25-34

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

coral
JSON
.