PT-2026-1089 · Qnap · Quts Hero+1

Coral · Published 2026-01-02 · Updated 2026-01-02 · CVE-2025-57705

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.7.3256 build 20250913 QNAP versions prior to QuTS hero h5.2.7.3256 build 20250913 QNAP versions prior to QuTS hero h5.3.1.3250 build 20250912

Description A resource allocation issue exists in QNAP operating systems. An attacker gaining administrator access can exploit this to exhaust resources, potentially preventing other systems, applications, or processes from accessing those resources.

Recommendations Update to QTS 5.2.7.3256 build 20250913 or later. Update to QuTS hero h5.2.7.3256 build 20250913 or later. Update to QuTS hero h5.3.1.3250 build 20250912 or later.

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-57705

Affected Products

Qts

Quts Hero

References · 6

• https://qnap.com/en/security-advisory/qsa-25-50 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-57705 · Security Note
• https://osv.dev/vulnerability/CVE-2025-57705 · Vendor Advisory
• https://t.me/CVEtracker/41252 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2007114118474420531 · Twitter Post
• https://twitter.com/CVEnew/status/2007118425148346490 · Twitter Post