VYPR
← All advisories
Medium severity4.9NVD Advisory· Published Feb 11, 2026· Updated Jun 17, 2026

CVE-2025-59386

CVE-2025-59386

Description

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.

We have already fixed the vulnerability in the following version: QuTS hero h5.3.2.3354 build 20251225 and later

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Qnap/Quts Hero6 versions
    cpe:2.3:o:qnap:quts_hero:h5.3.0.3115:build_20250430:*:*:*:*:*:*+ 5 more
    • cpe:2.3:o:qnap:quts_hero:h5.3.0.3115:build_20250430:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h5.3.0.3145:build_20250530:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h5.3.0.3192:build_20250716:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h5.3.1.3250:build_20250912:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h5.3.1.3292:build_20251024:*:*:*:*:*:*
    • (no CPE)range: before h5.3.2.3354 build 20251225
  • QNAP Systems Inc./QuTS herocpe-rescue
    Range: h5.3.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.