ZeroDay Findings
Sign inSign up

Findings

CVE-2025-52871

An out-of-bounds read vulnerability has been reported to affect License Center.

Published Jan 2, 2026 · updated Oct 14, 2026 · qnap license center

An out-of-bounds read vulnerability has been reported to affect License Center. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following version: License Center 2.0.36 and later

Timeline

Detection, updates, and resolution for this record.

  1. Jan 2, 2026 · NIST NVD

    Detected

    An out-of-bounds read vulnerability has been reported to affect License Center. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following version: License Center 2.0.36 and later

  2. Oct 14, 2026 · NIST NVD

    Updated

    An out-of-bounds read vulnerability has been reported to affect License Center. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following version: License Center 2.0.36 and later

Affected

  • cpe qnap/license centerversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2025-52871

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2025-52871

    30-day exploitation probability 0.6%

    first.org
  • NIST NVDVulnerability recordCVE-2025-52871

    An out-of-bounds read vulnerability has been reported to affect License Center. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following version: License Center 2.0.36 and l

    nvd.nist.gov

References