NULL Pointer Dereference Vulnerability in QNAP Operating System

CVE-2025-48729

What is CVE-2025-48729?

A NULL pointer dereference vulnerability has been identified in multiple versions of the QNAP operating system. This flaw allows a remote attacker with administrator access to exploit it, potentially leading to a denial-of-service (DoS) situation. Users are strongly urged to update to the fixed versions (QTS 5.2.6.3195 build 20250715 and later, or QuTS hero h5.2.6.3195 build 20250715 and later) to mitigate any risks associated with this vulnerability. For more details, refer to the security advisory provided by QNAP.

References