NULL Pointer Dereference Vulnerability in QNAP Operating System

CVE-2025-48728

What is CVE-2025-48728?

A NULL pointer dereference vulnerability allows a remote attacker with administrator access to exploit the QNAP operating system, potentially leading to a denial-of-service (DoS) condition. It is crucial for users to update to the patched versions to mitigate the risk associated with this vulnerability. Ensure your systems are running QTS 5.2.6.3195 build 20250715 or later, or QuTS hero h5.2.6.3195 build 20250715 or later to safeguard against unauthorized disruptions.

References