Priority LOW 21
An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions.
CVSS 4.0MEDIUM 4.6· Network · High privileges · No interaction · EPSS 0.00357 · Published 2026-01-02 · Fixed in 5.2.7.3256 build 20250913, h5.2.7.3256 build 20250913 +1 CWE-770
Priority LOW 21
An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions.
CVSS 4.0MEDIUM 4.6· Network · High privileges · No interaction · EPSS 0.00339 · Published 2026-01-02 · Fixed in 5.2.7.3256 build 20250913, h5.2.7.3256 build 20250913 +1 CWE-125
Priority LOW 21
An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions.
CVSS 4.0MEDIUM 4.6· Network · High privileges · No interaction · EPSS 0.00339 · Published 2026-01-02 · Fixed in 5.2.7.3256 build 20250913, h5.2.7.3256 build 20250913 +1 CWE-125
Priority LOW 21
An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions.
CVSS 4.0MEDIUM 4.6· Network · High privileges · No interaction · EPSS 0.00339 · Published 2026-01-02 · Fixed in 5.2.7.3256 build 20250913, h5.2.7.3256 build 20250913 +1 CWE-125
Priority LOW 8
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
CVSS 4.0LOW 1.2· Network · High privileges · No interaction · EPSS 0.00356 · Published 2026-01-02 · Fixed in 5.2.7.3256 build 20250913, h5.2.7.3256 build 20250913 +1 CWE-476
Priority LOW 8
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions.
CVSS 4.0LOW 1.2· Network · High privileges · No interaction · EPSS 0.00362 · Published 2026-01-02 · Fixed in 5.2.7.3256 build 20250913, h5.2.7.3256 build 20250913 +1 CWE-121
Priority LOW 8
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
CVSS 4.0LOW 1.3· Network · Low privileges · No interaction · EPSS 0.0034 · Published 2026-01-02 · Fixed in 5.2.7.3256 build 20250913, h5.2.7.3256 build 20250913 +1 CWE-476
Priority LOW 8
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions.
CVSS 4.0LOW 1.2· Network · High privileges · No interaction · EPSS 0.00339 · Published 2026-01-02 · Fixed in 5.2.7.3256 build 20250913, h5.3.1.3250 build 20250912 +1 CWE-134
Priority LOW 8
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
CVSS 4.0LOW 1.2· Network · High privileges · No interaction · EPSS 0.00357 · Published 2026-01-02 · Fixed in 5.2.7.3256 build 20250913, h5.2.7.3256 build 20250913 +1 CWE-476
Priority LOW 8
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
CVSS 4.0LOW 1.2· Network · High privileges · No interaction · EPSS 0.00356 · Published 2026-01-02 · Fixed in 5.2.7.3256 build 20250913, h5.2.7.3256 build 20250913 +1 CWE-476
Priority LOW 8
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
CVSS 4.0LOW 1.2· Network · High privileges · No interaction · EPSS 0.00357 · Published 2026-01-02 · Fixed in 5.2.7.3256 build 20250913, h5.2.7.3256 build 20250913 +1 CWE-476
Priority LOW 8
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
CVSS 4.0LOW 1.2· Network · High privileges · No interaction · EPSS 0.00356 · Published 2026-01-02 · Fixed in 5.2.7.3256 build 20250913, h5.2.7.3256 build 20250913 +1 CWE-476
Priority LOW 8
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
CVSS 4.0LOW 1.2· Network · High privileges · No interaction · EPSS 0.00356 · Published 2026-01-02 · Fixed in 5.2.7.3256 build 20250913, h5.2.7.3256 build 20250913 +1 CWE-476
Priority LOW 8
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
CVSS 4.0LOW 1.2· Network · High privileges · No interaction · EPSS 0.00356 · Published 2026-01-02 · Fixed in 5.2.7.3256 build 20250913, h5.2.7.3256 build 20250913 +1 CWE-476