NULL Pointer Dereference Vulnerability in QNAP Operating System

CVE-2025-52855

What is CVE-2025-52855?

A vulnerability has been identified in several versions of the QNAP operating system, which may be exploited by attackers possessing remote administrator access. By leveraging this NULL pointer dereference flaw, the attacker could initiate a denial-of-service (DoS) condition, potentially impacting the system's availability and functionality. It is crucial for users to upgrade to the patched versions to mitigate the risks associated with this vulnerability.

References