Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: QNAP Systems QTS, QuTS hero 5.2.7.3297 build 20251024, h5.2.7.3297 build 20251024, h5.3.1.3292 build 20251024 Clear all filters
TI-2025-36944 CVE-2025-59385 · GHSA-xggh-gjh3-26r2

Authentication bypass by spoofing in QNAP QTS

Priority MEDIUM 44

An authentication bypass by spoofing vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0HIGH 8.1 Network No auth No interaction EPSS 0.00636 Published 2025-12-16 Fixed in 5.2.7.3297 build 20251024, h5.2.7.3297 build 20251024 +1 CWE-290
TI-2025-39001 CVE-2025-62848 · GHSA-7vwr-42wj-qjpw

NULL pointer dereference in QNAP QTS

Priority MEDIUM 45

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0HIGH 8.1 Network No auth No interaction EPSS 0.00862 Published 2025-12-16 Fixed in 5.2.7.3297 build 20251024, h5.2.7.3297 build 20251024 +1 CWE-476
TI-2025-39002 CVE-2025-62849 · GHSA-4cj6-vc44-v9qw

SQL injection in QNAP QTS

Priority LOW 28

An SQL injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 5.2 Network No auth User interaction EPSS 0.00966 Published 2025-12-16 Fixed in 5.2.7.3297 build 20251024, h5.2.7.3297 build 20251024 +1 CWE-89