NULL Pointer Dereference Vulnerability in QNAP Operating Systems

CVE-2025-52854

What is CVE-2025-52854?

A vulnerability in QNAP operating systems allows for a NULL pointer dereference, which can be exploited by a remote attacker with administrator access. This exploitation can lead to a denial-of-service (DoS) attack, impacting the availability of the affected systems. Users are advised to update to QTS 5.2.6.3195 build 20250715 or later, and QuTS hero h5.2.6.3195 build 20250715 or later to mitigate this risk.

References