CVE-2025-66274EPSS p28.6%
CVE-2025-66274CVE-2025-66274
qnap / quts_hero
Description
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.
We have already fixed the vulnerability in the following versions:
QTS 5.2.9.3410 build 20260214 and later
QuTS hero h5.2.9.3410 build 20260214 and later
QuTS hero h5.3.2.3354 build 20251225 and later
QuTS hero h6.0.0.3397 build 20260206 and later
Scoring
| CVSS | 4.9 () |
| Vector | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H |
| EPSS | 0.37% probability of exploitation · percentile 28.6% · 2026-06-19T12:03:05Z |
| Last modified | 2026-06-09 |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.