Qnap · Qnap · CVE-2025-62847
**Name of the Vulnerable Software and Affected Versions**
QNAP versions prior to 5.2.7.3297 build 20251024
QuTS hero versions prior to h5.2.7.3297 build 20251024
QuTS hero versions prior to h5.3.1.3292 build 20251024
**Description**
The software contains an improper neutralization of argument delimiters in a command, which could allow remote attackers to alter execution logic. The issue is actively exploited.
**Recommendations**
Update QNAP to version 5.2.7.3297 build 20251024 or later.
Update QuTS hero to version h5.2.7.3297 build 20251024 or later.
Update QuTS hero to version h5.3.1.3292 build 20251024 or later.