PT-2026-47691 · Qnap · Qts+1

Coral · CVE-2025-62858 · Published 2026-06-09 · Updated 2026-06-12

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions QTS versions prior to 5.2.9.3410 build 20260214 QuTS hero versions prior to h5.2.9.3410 build 20260214 QuTS hero versions prior to h5.3.4.3500 build 20260520 QuTS hero versions prior to h6.0.0.3397 build 20260206

Description A buffer overflow occurs when a program writes more data to a memory buffer than it can hold, potentially overwriting adjacent memory. A remote attacker with administrator account access can exploit this issue to modify memory or cause processes to crash.

Recommendations Update QTS to version 5.2.9.3410 build 20260214 or later. Update QuTS hero to version h5.2.9.3410 build 20260214 or later. Update QuTS hero to version h5.3.4.3500 build 20260520 or later. Update QuTS hero to version h6.0.0.3397 build 20260206 or later.

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2025-62858

Affected Products

Qts

Quts Hero

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-62858 · Security Note
• https://t.me/cveNotify/167214 · Telegram Post
• https://qnap.com/en/security-advisory/qsa-26-10 · Note