CVE-2025-52854 | QNAP QTS/QuTS hero prior 5.2.6.3195 Build 20250715 null pointer dereference (qsa-25-36)

October 3, 2025 Yanac

A vulnerability described as problematic has been identified in QNAP QTS and QuTS hero. This impacts an unknown function. The manipulation results in null pointer dereference.

This vulnerability is known as CVE-2025-52854. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More