Critical severity9.8NVD Advisory· Published Jan 2, 2026· Updated Jun 17, 2026
CVE-2025-11837
CVE-2025-11837
Description
An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection mechanism.
We have already fixed the vulnerability in the following version: Malware Remover 6.6.8.20251023 and later
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3>=6.6.8.20251023+ 1 more
- (no CPE)range: >=6.6.8.20251023
- cpe:2.3:a:qnap:malware_remover:*:*:*:*:*:*:*:*range: >=6.6.3,<6.6.8.20251023
- Range: 6.6.x
Patches
Vulnerability mechanics
References
1- www.qnap.com/en/security-advisory/qsa-25-47nvdVendor Advisory
News mentions
5- AryStinger Botnet Converts Legacy Routers to Global ProxiesGovInfoSecurity · Jun 23, 2026
- AryStinger Botnet Hijacks 4,300+ Routers to Build Global Attack Proxy NetworkCyber Security News · Jun 22, 2026
- AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy NetworkThe Hacker News · Jun 22, 2026
- AryStinger botnet infected thousands of D-Link routers worldwideBleepingComputer · Jun 21, 2026
- ZDI-26-198: (Pwn2Own) QNAP TS-453E malware_remover Code Injection Remote Code Execution VulnerabilityZero Day Initiative · Mar 16, 2026