CVE-2025-52431 | QNAP QTS/QuTS hero 5.2.7.3256/5.3.1.3250 null pointer dereference (qsa-25-50)

January 2, 2026 Yanac

A vulnerability described as problematic has been identified in QNAP QTS and QuTS hero 5.2.7.3256/5.3.1.3250. This vulnerability affects unknown code. Such manipulation leads to null pointer dereference.

This vulnerability is documented as CVE-2025-52431. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More