Skip to content
CVE PROGRAM SOURCE RECORD1.2 Low

CVE-2025-59386

QuTS hero

Description

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: QuTS hero h5.3.2.3354 build 20251225 and later

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

QNAP Systems Inc. QuTS hero

Default version status: unaffected

  • h5.3.x to < h5.3.2.3354 build 20251225affected

References