ZeroDay Findings
Sign inSign up

Findings

CVE-2025-62850

A NULL pointer dereference vulnerability has been reported to affect QTS, QVP, QuTS cloud and QuTS hero.

Published Jun 10, 2026 · corrected/updated Oct 15, 2026 · QNAP Systems Inc. QTS · evidence confidence high

A NULL pointer dereference vulnerability has been reported to affect QTS, QVP, QuTS cloud and QuTS hero. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: QTS 5.2.9.3410 build 20260214 and later QVP 2.7.4 and later QuTS cloud c5.2.9.3468 build 20260413 and later QuTS hero h5.2.9.3410 build 20260214 and later QuTS hero h5.3.4.3500 build 20260520 and later QuTS hero h6.0.0.3459 build 20260409 and later

Grounded briefings

Catalog interpretations for three audiences. Each brief cites ingested metadata and the original advisories below. They are not independent research and they do not invent exploit steps.

Executive

CVE-2025-62850 is a medium public vulnerability record for QNAP Systems Inc. QTS. It is not currently listed in the CISA Known Exploited catalog. Check the linked vendor or CERT advisories for patch status. This summary is a catalog interpretation of the ingested metadata and cites the original advisories below.

System administrator

Identify whether QNAP Systems Inc. QTS is in your estate, then compare installed versions with the affected ranges. Affected packages or ranges on record: qnap/quts hero; QNAP Systems Inc. QTS; QNAP Systems Inc. QVP; QNAP Systems Inc. QuTS cloud. Check the linked vendor or CERT advisories for patch status. Prefer the vendor or distribution advisory linked in Sources before changing production systems. This is a catalog interpretation, not a runbook.

Security analyst

Signals on file: CVSS 5.1, EPSS 0.4%. It is not currently listed in the CISA Known Exploited catalog. Weakness classes: CWE-476. Sources contributing to this record: circl, cve_org, epss, nvd. Public exploit references, when present, are outbound links only and are not proof of active exploitation. This is a catalog interpretation of stored metadata.

Exploitation and remediation

  • Exploitation evidence

    Not listed as known exploited in CISA KEV. Not in the CISA KEV catalog.

  • Patch and remediation

    No required-action text is stored yet. Use the vendor or CERT links in Sources for patch availability.

  • Safe detection guidance

    Compare installed versions with the affected ranges below and verify the advisory from the original publisher. This site stores metadata and outbound links only; it does not ship exploit code or proof-of-concept payloads.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Jun 10, 2026 · NIST NVD

    Detected

    A NULL pointer dereference vulnerability has been reported to affect QTS, QVP, QuTS cloud and QuTS hero. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: QTS 5.2.9.3410 build 20260214 and later QVP 2.7.4 and later QuTS cloud c5.2.9.3468 build 202

  2. Oct 15, 2026 · NIST NVD

    Updated

    A NULL pointer dereference vulnerability has been reported to affect QTS, QVP, QuTS cloud and QuTS hero. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: QTS 5.2.9.3410 build 20260214 and later QVP 2.7.4 and later QuTS cloud c5.2.9.3468 build 202

Affected

  • cpe qnap/quts heroversion unspecified
  • vendor QNAP Systems Inc. QTSversion unspecified
  • vendor QNAP Systems Inc. QVPversion unspecified
  • vendor QNAP Systems Inc. QuTS cloudversion unspecified
  • vendor QNAP Systems Inc. QuTS heroversion unspecified

Sources

  • CIRCL Vulnerability LookupVulnerability recordCVE-2025-62850

    A NULL pointer dereference vulnerability has been reported to affect QTS, QVP, QuTS cloud and QuTS hero. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerabilit

    vulnerability.circl.lu
  • CVE.orgVulnerability recordCVE-2025-62850

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2025-62850

    30-day exploitation probability 0.4%

    first.org
  • NIST NVDVulnerability recordCVE-2025-62850

    A NULL pointer dereference vulnerability has been reported to affect QTS, QVP, QuTS cloud and QuTS hero. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerabili

    nvd.nist.gov

References