PT-2026-1075 · Qnap · Quts Hero+1

Coral · Publicado 2026-01-02 · Atualizado 2026-01-07 · CVE-2025-52863

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.7.3256 build 20250913 QNAP versions prior to QuTS hero h5.2.7.3256 build 20250913 QNAP versions prior to QuTS hero h5.3.0.3192 build 20250716

Description A buffer overflow issue exists in QNAP operating systems. A remote attacker who obtains a user account may be able to modify memory or cause processes to crash.

Recommendations Update QTS to version 5.2.7.3256 build 20250913 or later. Update QuTS hero to version h5.2.7.3256 build 20250913 or later. Update QuTS hero to version h5.3.0.3192 build 20250716 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

CVE-2025-52863

Produtos afetados

Qts

Quts Hero

Referências · 7

• https://twitter.com/VulmonFeeds/status/2007152515444285730 · Publicação no Twitter
• https://t.me/CVEtracker/41238 · Publicação no Telegram
• https://qnap.com/en/security-advisory/qsa-25-50 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2007118438175842507 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-52863 · Nota de Segurança
• https://twitter.com/cracbot/status/2008856201589846484 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-52863 · Aviso do Fabricante