VYPR
← All advisories
Medium severity4.9NVD Advisory· Published Feb 11, 2026· Updated Jun 9, 2026

CVE-2025-66274

CVE-2025-66274

Description

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.

We have already fixed the vulnerability in the following versions: QTS 5.2.9.3410 build 20260214 and later QuTS hero h5.2.9.3410 build 20260214 and later QuTS hero h5.3.2.3354 build 20251225 and later QuTS hero h6.0.0.3397 build 20260206 and later

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Qnap/Quts Hero6 versions
    cpe:2.3:o:qnap:quts_hero:h5.3.0.3115:build_20250430:*:*:*:*:*:*+ 5 more
    • cpe:2.3:o:qnap:quts_hero:h5.3.0.3115:build_20250430:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h5.3.0.3145:build_20250530:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h5.3.0.3192:build_20250716:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h5.3.1.3250:build_20250912:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h5.3.1.3292:build_20251024:*:*:*:*:*:*
    • (no CPE)range: before h5.2.9.3410 build 20260214, before h5.3.2.3354 build 20251225, before h6.0.0.3397 build 20260206
  • Qnap/Qtsllm-fuzzy
    Range: before 5.2.9.3410 build 20260214
  • QNAP Systems Inc./QuTS herov5
    Range: ?

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.