Exploitable Format String Vulnerability in QNAP Operating Systems

CVE-2025-52429

What is CVE-2025-52429?

A format string vulnerability has been identified in multiple versions of QNAP's operating systems, allowing remote attackers with administrator access to exploit this weakness. Successful exploitation can lead to unauthorized access to sensitive data or manipulation of system memory. It is crucial for users to ensure they have upgraded to QTS 5.2.6.3195 build 20250715 or later, and QuTS hero h5.2.6.3195 build 20250715 or later to mitigate this risk.

References