Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Release: QNAP Systems QTS 5.2.5.3145 build 20250526 Clear all filters
TI-2025-24026 CVE-2025-33032 · GHSA-vfg2-6pwx-p32c

Path traversal in QNAP QTS

Priority LOW 24

A path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00499 Published 2025-08-29 Fixed in 5.2.5.3145 build 20250526, QuTS hero h5.2.5.3138 build 20250519 CWE-22
TI-2025-21593 CVE-2025-30274 · GHSA-g3rj-xppw-7c7v

NULL pointer dereference in QNAP QTS

Priority LOW 23

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.0031 Published 2025-08-29 Fixed in 5.2.5.3145 build 20250526, h5.2.5.3138 build 20250519 CWE-476
TI-2025-21592 CVE-2025-30273 · GHSA-2fcj-xjq4-c3h8

Out-of-bounds write in QNAP QTS

Priority LOW 31

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00383 Published 2025-08-29 Fixed in 5.2.5.3145 build 20250526, h5.2.5.3138 build 20250519 CWE-787
TI-2025-21591 CVE-2025-30272 · GHSA-3gcv-ff7j-4x62

NULL pointer dereference in QNAP QTS

Priority LOW 23

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.0031 Published 2025-08-29 Fixed in 5.2.5.3145 build 20250526, h5.2.5.3138 build 20250519 CWE-476
TI-2025-21590 CVE-2025-30271 · GHSA-39x8-8q4p-7578

Path traversal in QNAP QTS

Priority LOW 25

A path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00488 Published 2025-08-29 Fixed in 5.2.5.3145 build 20250526, h5.2.5.3138 build 20250519 CWE-22
TI-2025-21589 CVE-2025-30270 · GHSA-54gp-f5pr-296c

Path traversal in QNAP QTS

Priority LOW 25

A path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00488 Published 2025-08-29 Fixed in 5.2.5.3145 build 20250526, h5.2.5.3138 build 20250519 CWE-22
TI-2025-21587 CVE-2025-30268 · GHSA-583f-27px-xqjw

NULL pointer dereference in QNAP QTS

Priority LOW 24

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00373 Published 2025-08-29 Fixed in 5.2.5.3145 build 20250526, h5.2.5.3138 build 20250519 CWE-476
TI-2025-21586 CVE-2025-30267 · GHSA-9r22-fhxq-hh2c

NULL pointer dereference in QNAP QTS

Priority LOW 24

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00373 Published 2025-08-29 Fixed in 5.2.5.3145 build 20250526, h5.2.5.3138 build 20250519 CWE-476
TI-2025-21584 CVE-2025-30265 · GHSA-w7x8-hj56-mff5

Buffer overflow in QNAP QTS

Priority LOW 12

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00379 Published 2025-08-29 Fixed in 5.2.5.3145 build 20250526, h5.2.5.3138 build 20250519 CWE-120
TI-2025-21583 CVE-2025-30264 · GHSA-crj7-cmmw-8p9m

Command injection in QNAP QTS

Priority LOW 39

A command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.01668 Published 2025-08-29 Fixed in 5.2.5.3145 build 20250526, h5.2.5.3138 build 20250519 CWE-77
TI-2025-21270 CVE-2025-29882 · GHSA-r4r3-ch7m-8ph9

NULL pointer dereference in QNAP QTS

Priority LOW 24

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0046 Published 2025-08-29 Fixed in 5.2.5.3145 build 20250526, h5.2.5.3138 build 20250519 CWE-476