NULL Pointer Dereference Vulnerability in QNAP Operating System

CVE-2025-52859

What is CVE-2025-52859?

A NULL pointer dereference vulnerability has been identified in multiple versions of QNAP operating systems, allowing potential remote attackers with administrative access to exploit this flaw. By leveraging this vulnerability, an attacker can initiate a denial-of-service (DoS) attack, disrupting the availability of the affected systems. QNAP has addressed this issue in the following versions: QTS 5.2.6.3195 build 20250715 and later, as well as QuTS hero h5.2.6.3195 build 20250715 and later.

References