NULL Pointer Dereference Vulnerability in QNAP Operating Systems

CVE-2025-52428

What is CVE-2025-52428?

A NULL pointer dereference vulnerability has been discovered in various versions of the QNAP operating system. This security flaw allows an attacker with administrator access to trigger a denial-of-service (DoS) condition, which can disrupt service for legitimate users. QNAP has addressed this issue in versions QTS 5.2.6.3195 build 20250715 and later, ensuring enhanced security for users.

References