CVE-2025-48726 | QNAP QTS/QuTS hero prior 5.2.6.3195 Build 20250715 null pointer dereference (qsa-25-36)

October 3, 2025 Yanac

A vulnerability classified as problematic was found in QNAP QTS and QuTS hero. This affects an unknown function. The manipulation results in null pointer dereference.

This vulnerability was named CVE-2025-48726. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More