CVE-2025-52857 | QNAP QTS/QuTS hero prior 5.2.6.3195 Build 20250715 null pointer dereference (qsa-25-36)

October 3, 2025 Yanac

A vulnerability classified as problematic was found in QNAP QTS and QuTS hero. Affected by this vulnerability is an unknown functionality. Such manipulation leads to null pointer dereference.

This vulnerability is uniquely identified as CVE-2025-52857. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More