CVE-2025-44013
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.6.3195 build 20250715 and later QuTS hero h5.2.6.3195 build 20250715 and later
- Score
- CVSS 3.1 6.5 Medium
- Status
- Analyzed - security@qnapsecurity.com.tw
- Published
- 2026-01-02
- Last modified
- 2026-10-14
- Weaknesses
- CWE-476
Affected products
References
- https://www.qnap.com/en/security-advisory/qsa-25-50