NULL Pointer Dereference in QNAP Operating System

CVE-2025-52857

What is CVE-2025-52857?

A vulnerability has been identified in several versions of QNAP's operating system due to a NULL pointer dereference. This flaw could potentially allow a remote attacker, armed with administrative privileges, to exploit the vulnerability and execute a denial-of-service (DoS) attack, leading to system disruptions. Users are advised to upgrade to the fixed versions, QTS 5.2.6.3195 build 20250715 and later, or QuTS hero h5.2.6.3195 build 20250715 and later, to mitigate this risk.

References