NULL Pointer Dereference Vulnerability in QNAP Operating System

CVE-2025-48726

What is CVE-2025-48726?

A NULL pointer dereference vulnerability has been identified in multiple versions of the QNAP operating system. An attacker with administrator access could exploit this flaw to initiate a denial-of-service (DoS) attack, potentially compromising the system's availability. To mitigate this risk, users are advised to update to QTS 5.2.6.3195 build 20250715 or later, and QuTS hero h5.2.6.3195 build 20250715 or later, where this vulnerability has been addressed.

References