Description
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.
We have already fixed the vulnerability in the following versions: QTS 5.2.9.3410 build 20260214 and later QuTS hero h5.2.9.3410 build 20260214 and later QuTS hero h5.3.2.3354 build 20251225 and later QuTS hero h6.0.0.3397 build 20260206 and later
Metrics
CVSS 3.1 4.9/10
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| QNAP Systems Inc. | QTS | >= 5.2.0, < 5.2.9.3410 build 20260214 |
| QNAP Systems Inc. | QuTS hero | >= h5.2.0, < h5.2.9.3410 build 20260214; >= h5.3.0, < h5.3.2.3354 build 20251225; >= ?, < h6.0.0.3397 build 20260206 |
References
- https://www.qnap.com/en/security-advisory/qsa-26-08Vendor Advisory
Timeline
- Published
- Feb 11, 2026
- Last modified
- Jun 17, 2026
- NVD status
- Modified