PT-2026-1071 · Qnap · Qnap+1

Coral · Published 2026-01-02 · Updated 2026-01-02 · CVE-2025-47208

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions QNAP versions prior to 5.2.6.3195 build 20250715 QNAP QuTS hero versions prior to 5.2.6.3195 build 20250715

Description A flaw exists where resources can be allocated without limits or throttling. If an attacker obtains a user account, they may be able to prevent other systems, applications, or processes from accessing the same type of resource.

Recommendations Update QNAP to version 5.2.6.3195 build 20250715 or later. Update QNAP QuTS hero to version 5.2.6.3195 build 20250715 or later.

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-47208

Affected Products

Qnap

Quts Hero

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-47208 · Security Note
• https://qnap.com/en/security-advisory/qsa-25-50 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-47208 · Vendor Advisory
• https://twitter.com/CVEnew/status/2007118442122682755 · Twitter Post
• https://t.me/CVEtracker/41234 · Telegram Post