Null Pointer Dereference Vulnerability in QNAP Operating Systems

CVE-2025-53596

What is CVE-2025-53596?

A null pointer dereference vulnerability has been identified in several versions of QNAP operating systems. This flaw can allow malicious actors who gain administrator access to exploit the vulnerability effectively, resulting in potential denial-of-service (DoS) attacks. Users are advised to update to QTS version 5.2.7.3256 build 20250913 or later and QuTS hero version h5.2.7.3256 build 20250913 or later to mitigate the risks.

References