Skip to content
OpenAdvisories
High WID-SEC-2025-2529 4 CVEs

QNAP NAS QTS und QTS hero: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Published Nov 9, 2025 · Updated Dec 15, 2025 · Revision 2 · de-DE

Vendor: QNAP Systems Product: NAS

Summary

Ein Angreifer kann mehrere Schwachstellen in QNAP NAS ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

Product

QNAP ist ein Hersteller von NAS (Network Attached Storage) Lösungen.

Vulnerabilities 4

  • High 8.1
    CVE-2025-59385

    QTS, QuTS hero

    An authentication bypass by spoofing vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to access resources which are not otherwise accessible without proper authentication…

    QNAP Systems QTS QuTS hero
  • High 8.1
    CVE-2025-62848

    QTS, QuTS hero

    A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the fol…

    QNAP Systems QTS QuTS hero
  • Medium 6.6
    CVE-2025-62847

    QTS, QuTS hero

    An improper neutralization of argument delimiters in a command vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to alter execution logic. We have already fixed the vulner…

    QNAP Systems QTS QuTS hero
  • Medium 5.2
    CVE-2025-62849

    QTS, QuTS hero

    An SQL injection vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versi…

    QNAP Systems QTS QuTS hero

Revision history

  1. #2

    CVE ergänzt

  2. #1

    Initiale Fassung

References