CVE-2025-52427 | QNAP QTS/QuTS hero prior 5.2.6.3195 Build 20250715 null pointer dereference (qsa-25-36)

October 3, 2025 Yanac

A vulnerability identified as problematic has been detected in QNAP QTS and QuTS hero. The affected element is an unknown function. Performing manipulation results in null pointer dereference.

This vulnerability is reported as CVE-2025-52427. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More