NULL Pointer Dereference Vulnerability in QNAP Operating Systems

CVE-2025-66281

What is CVE-2025-66281?

A NULL pointer dereference vulnerability has been discovered in various versions of QNAP operating systems. This vulnerability can be exploited by remote attackers, potentially allowing them to perform denial-of-service (DoS) attacks. Users are advised to update their systems to the fixed versions to mitigate this risk. Affected users should ensure they are operating on QTS 5.2.9.3410 build 20260214 and later, or QuTS hero h5.2.9.3410 build 20260214 and later, among others, to secure their systems against exploitation.

References