NULL Pointer Dereference Vulnerability in QNAP Operating Systems

CVE-2025-52858

What is CVE-2025-52858?

A NULL pointer dereference vulnerability has been identified in various versions of QNAP's QTS and QuTS hero operating systems. When exploited by an attacker with administrator access, this vulnerability can be leveraged to execute a denial-of-service (DoS) attack, potentially compromising the availability of the affected systems. Users are advised to upgrade to QTS 5.2.6.3195 build 20250715 or later and QuTS hero h5.2.6.3195 build 20250715 or later to secure their devices against this threat.

References