NULL Pointer Dereference Vulnerability in QNAP Operating System

CVE-2025-48727

What is CVE-2025-48727?

A NULL pointer dereference vulnerability has been identified in multiple versions of the QNAP Operating System. An unauthenticated remote attacker with administrator privileges could exploit this vulnerability to initiate a denial-of-service (DoS) attack, potentially disrupting service availability. It is crucial for users to update their systems to versions QTS 5.2.6.3195 build 20250715 or later, and QuTS hero h5.2.6.3195 build 20250715 or later to mitigate this risk. For more information, refer to the QNAP security advisory.

References