PT-2026-1102 · Qnap · Quts Hero+1

Published 2026-01-02 · Updated 2026-01-06 · CVE-2025-9110

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.8.3332 build 20251128 QNAP versions prior to QuTS hero h5.2.8.3321 build 20251117 QNAP versions prior to QuTS hero h5.3.1.3250 build 20250912

Description A flaw exists that allows unauthorized access to sensitive system information. Attackers can exploit this to read application data.

Recommendations Update QTS to version 5.2.8.3332 build 20251128 or later. Update QuTS hero to version h5.2.8.3321 build 20251117 or later. Update QuTS hero to version h5.3.1.3250 build 20250912 or later.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2025-9110

Affected Products

Qts

Quts Hero

References · 6

• https://osv.dev/vulnerability/CVE-2025-9110 · Vendor Advisory
• https://qnap.com/en/security-advisory/qsa-25-51 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9110 · Security Note
• https://twitter.com/CVEnew/status/2007118424250757407 · Twitter Post
• https://t.me/cveNotify/147819 · Telegram Post
• https://t.me/CVEtracker/41262 · Telegram Post