NULL Pointer Dereference in QNAP File Station Vulnerability

CVE-2025-53412

What is CVE-2025-53412?

A NULL pointer dereference vulnerability was reported in QNAP's File Station 5. This issue allows a remote attacker, with access to a user account, to exploit the vulnerability, potentially leading to a denial-of-service (DoS) attack. Users are strongly encouraged to upgrade to File Station 5 version 5.5.6.5018 or later to mitigate this risk.

References