NULL Pointer Dereference Vulnerability in QNAP Operating System

CVE-2025-52427

What is CVE-2025-52427?

A NULL pointer dereference vulnerability has been identified in multiple versions of the QNAP operating system. This flaw can be exploited by an attacker with administrator access to perform a denial-of-service (DoS) attack, disrupting the normal functioning of the device. Users are encouraged to update their systems to QTS 5.2.6.3195 build 20250715 or later, and QuTS hero h5.2.6.3195 build 20250715 or later, to mitigate this security risk.

References