PT-2026-7574 · Qnap · Qnap Qts+2

Coral · CVE-2025-66277 · Publicado 2026-02-11 · Atualizado 2026-02-13

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.2.8.3350 build 20251216 QNAP QuTS hero h5.3.2 versions prior to h5.3.2.3354 build 20251225 QNAP QuTS hero h5.2.8 versions prior to h5.2.8.3350 build 20251216

Description A flaw exists that allows remote attackers to traverse the file system to unintended locations. This vulnerability affects QNAP operating systems.

Recommendations Update QTS to version 5.2.8.3350 build 20251216 or later. Update QuTS hero h5.3.2 to version h5.3.2.3354 build 20251225 or later. Update QuTS hero h5.2.8 to version h5.2.8.3350 build 20251216 or later.

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-2025-66277

Produtos afetados

Qnap Qts

Quts Hero H5.2.8

Quts Hero H5.3.2

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-66277 · Nota de Segurança
• https://t.me/cveNotify/151853 · Publicação no Telegram
• https://twitter.com/vuldb/status/2021661078879666661 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-66277 · Aviso do Fabricante
• https://qnap.com/en/security-advisory/qsa-26-05 · Aviso do Fabricante
• https://twitter.com/CCBalert/status/2022236318646825039 · Publicação no Twitter