CVE-2025-57705
An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions.
Published Jan 2, 2026 · updated Oct 14, 2026 · qnap quts hero
An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.1.3250 build 20250912 and later
Timeline
Detection, updates, and resolution for this record.
Jan 2, 2026 · NIST NVD
Detected
An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following versions: QTS 5.2
Oct 14, 2026 · NIST NVD
Updated
An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following versions: QTS 5.2
Affected
- cpe qnap/qts5.2.0.2737
- cpe qnap/quts heroh5.2.0.2737
- cpe qnap/quts heroh5.2.0.2782
- cpe qnap/quts heroh5.2.0.2789
- cpe qnap/quts heroh5.2.0.2802
- cpe qnap/quts heroh5.2.0.2823
- cpe qnap/quts heroh5.2.0.2851
- cpe qnap/quts heroh5.2.0.2860
- cpe qnap/quts heroh5.2.1.2929
Sources
- CVE.orgCVE-2025-57705
Official CVE identifier
cve.org - FIRST EPSSCVE-2025-57705
30-day exploitation probability 0.4%
first.org - NIST NVDCVE-2025-57705
An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or proces
nvd.nist.gov