Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: QNAP Systems QTS 5.2.8.3332 build 20251128 Clear all filters
TI-2025-39005 CVE-2025-62852 · GHSA-vjhv-9hfj-67mh

QTS, QuTS hero

Priority LOW 8

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0LOW 1.2 Network High privileges No interaction EPSS 0.00362 Published 2026-01-02 Fixed in 5.2.8.3332 build 20251128 CWE-121
TI-2025-36940 CVE-2025-59381 · GHSA-fj3g-cqvg-f3jx

Path traversal in QNAP QTS

Priority LOW 31

A path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00466 Published 2026-01-02 Fixed in 5.2.8.3332 build 20251128, h5.2.8.3321 build 20251117 +1 CWE-22
TI-2025-36939 CVE-2025-59380 · GHSA-74xj-22j3-mfhw

Path traversal in QNAP QTS

Priority LOW 22

A path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 4.6 Network High privileges No interaction EPSS 0.00578 Published 2026-01-02 Fixed in 5.2.8.3332 build 20251128, h5.2.8.3321 build 20251117 CWE-22
TI-2025-30943 CVE-2025-48721 · GHSA-cm78-px7f-5m69

QTS, QuTS hero

Priority LOW 8

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0LOW 1.2 Network High privileges No interaction EPSS 0.00428 Published 2026-01-02 Fixed in 5.2.8.3332 build 20251128 CWE-120
TI-2025-08352 CVE-2025-9110 · GHSA-xhj9-wqh5-g6hq

An exposure of sensitive system information to an unauthorized control sphere…

Priority LOW 14

An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0LOW 2.7 Network No auth No interaction EPSS 0.00453 Published 2026-01-02 Fixed in 5.2.8.3332 build 20251128, h5.2.8.3321 build 20251117 +1 CWE-497