PT-2026-1071 · Qnap · Qnap+1

Coral · CVE-2025-47208 · Publicado 2026-01-02 · Atualizado 2026-01-02

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions QNAP versions prior to 5.2.6.3195 build 20250715 QNAP QuTS hero versions prior to 5.2.6.3195 build 20250715

Description A flaw exists where resources can be allocated without limits or throttling. If an attacker obtains a user account, they may be able to prevent other systems, applications, or processes from accessing the same type of resource.

Recommendations Update QNAP to version 5.2.6.3195 build 20250715 or later. Update QNAP QuTS hero to version 5.2.6.3195 build 20250715 or later.

Correção

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

CVE-2025-47208

Produtos afetados

Qnap

Quts Hero

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-47208 · Nota de Segurança
• https://qnap.com/en/security-advisory/qsa-25-50 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2007118442122682755 · Publicação no Twitter
• https://t.me/CVEtracker/41234 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-47208 · Aviso do Fabricante