NULL Pointer Dereference Vulnerability in QNAP Operating Systems

CVE-2025-52866

What is CVE-2025-52866?

A NULL pointer dereference vulnerability has been identified in specific versions of QNAP operating systems. This issue allows remote attackers with administrative accounts to exploit the vulnerability, potentially leading to a denial-of-service (DoS) situation that can disrupt services. It is crucial for users to update to the patched versions: QTS 5.2.6.3195 build 20250715 and later, or QuTS hero h5.2.6.3195 build 20250715 and later, to mitigate the associated risks.

References