cvedb.io
CVE-2025-66281
HIGH · CVSS 7.2
EPSS exploitation probability: 0%
Published 2026-06-10T04:17:14.383 · Last modified 2026-06-17T09:56:36.480

Summary

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3410 build 20260214 and later QuTS hero h5.2.9.3410 build 20260214 and later QuTS hero h5.3.4.3500 build 20260520 and later QuTS hero h6.0.0.3397 build 20260206 and later

Affected products

qnap — qts

Does this affect you?

Add your gear to cvedb and we'll alert you only when qnap ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.