NULL Pointer Dereference Vulnerability in Qsync Central by QNAP

CVE-2025-44009

What is CVE-2025-44009?

A NULL pointer dereference vulnerability has been identified in Qsync Central, allowing remote attackers with a valid user account to exploit this flaw. Successful exploitation could lead to a denial-of-service attack, interrupting service for legitimate users. QNAP has addressed this issue in version 5.0.0.1 and later, urging users to update promptly to bolster security and prevent potential attacks.

References