Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: QNAP Systems QuTS hero h5.2.9.3410 build 20260214, h5.3.4.3500 build 20260520, h6.0.0.3397 build 20260206 Clear all filters
TI-2025-40759 CVE-2025-66281 · GHSA-hjv6-9pr5-j6w8

NULL pointer dereference in QNAP QTS

Priority LOW 37

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00456 Published 2026-06-10 Fixed in 5.2.9.3410 build 20260214, h5.2.9.3410 build 20260214 +2 CWE-476
TI-2025-40758 CVE-2025-66280 · GHSA-25q9-p4j4-6rj7

Stack-based buffer overflow in QNAP QTS

Priority LOW 24

An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00436 Published 2026-06-10 Fixed in 5.2.9.3410 build 20260214, h5.2.9.3410 build 20260214 +2 CWE-121
TI-2025-40757 CVE-2025-66279 · GHSA-vpcm-92g9-vgwx

OS command injection in QNAP QTS

Priority MEDIUM 41

A command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01051 Published 2026-06-10 Fixed in 5.2.9.3410 build 20260214, h5.2.9.3410 build 20260214 +2 CWE-78
TI-2025-40752 CVE-2025-66273 · GHSA-8g9p-fvw8-cwm4

OS command injection in QNAP QTS

Priority MEDIUM 41

A command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01051 Published 2026-06-10 Fixed in 5.2.9.3410 build 20260214, h5.2.9.3410 build 20260214 +2 CWE-78