CVE-2025-62852 – QTS, QuTS hero

CVE ID : CVE-2025-62852

Published : Jan. 2, 2026, 3:19 p.m. | 1 hour, 5 minutes ago

Description : A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes.

We have already fixed the vulnerability in the following version:
QTS 5.2.8.3332 build 20251128 and later

Severity: 1.2 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…