CVE-2025-62858

Published: Giu 09, 2026 Last Modified: Giu 12, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 5,1
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: high
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
MEDIUM 6,5
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: high
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: high
Availability: high

Description

AI Translation Available

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes.

We have already fixed the vulnerability in the following versions:
QTS 5.2.9.3410 build 20260214 and later
QuTS hero h5.2.9.3410 build 20260214 and later
QuTS hero h5.3.4.3500 build 20260520 and later
QuTS hero h6.0.0.3397 build 20260206 and later

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0009
Percentile
0,3th
Updated

EPSS Score Trend (Last 7 Days)

121

Stack-based Buffer Overflow

Draft
Abstraction: Variant Structure: Simple
Common Consequences
Security Scopes Affected:
Availability Integrity Confidentiality Access Control Other
Potential Impacts:
Modify Memory Dos: Crash, Exit, Or Restart Dos: Resource Consumption (Cpu) Dos: Resource Consumption (Memory) Execute Unauthorized Code Or Commands Bypass Protection Mechanism Other
Applicable Platforms
Languages: Memory-Unsafe, C, C++
Likelihood of Exploit: High
View CWE Details
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.3.1.3250
cpe:2.3:o:qnap:quts_hero:h5.3.1.3250:build_20250912:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Qts by Qnap

Product Information
Vendor Qnap
Product Qts
Version 5.2.7.3297
cpe:2.3:o:qnap:qts:5.2.7.3297:build_20251024:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.2.7.3256
cpe:2.3:o:qnap:quts_hero:h5.2.7.3256:build_20250913:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.2.4.3079
cpe:2.3:o:qnap:quts_hero:h5.2.4.3079:build_20250321:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Qts by Qnap

Product Information
Vendor Qnap
Product Qts
Version 5.2.8.3359
cpe:2.3:o:qnap:qts:5.2.8.3359:build_20251225:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Qts by Qnap

Product Information
Vendor Qnap
Product Qts
Version 5.2.0.2782
cpe:2.3:o:qnap:qts:5.2.0.2782:build_20240601:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Qts by Qnap

Product Information
Vendor Qnap
Product Qts
Version 5.2.0.2744
cpe:2.3:o:qnap:qts:5.2.0.2744:build_20240424:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.2.8.3321
cpe:2.3:o:qnap:quts_hero:h5.2.8.3321:build_20251117:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.2.0.2782
cpe:2.3:o:qnap:quts_hero:h5.2.0.2782:build_20240601:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.2.7.3297
cpe:2.3:o:qnap:quts_hero:h5.2.7.3297:build_20251024:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Qts by Qnap

Product Information
Vendor Qnap
Product Qts
Version 5.2.6.3195
cpe:2.3:o:qnap:qts:5.2.6.3195:build_20250715:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.3.0.3115
cpe:2.3:o:qnap:quts_hero:h5.3.0.3115:build_20250430:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.2.4.3070
cpe:2.3:o:qnap:quts_hero:h5.2.4.3070:build_20250312:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Qts by Qnap

Product Information
Vendor Qnap
Product Qts
Version 5.2.0.2851
cpe:2.3:o:qnap:qts:5.2.0.2851:build_20240808:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Qts by Qnap

Product Information
Vendor Qnap
Product Qts
Version 5.2.7.3256
cpe:2.3:o:qnap:qts:5.2.7.3256:build_20250913:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Qts by Qnap

Product Information
Vendor Qnap
Product Qts
Version 5.2.4.3079
cpe:2.3:o:qnap:qts:5.2.4.3079:build_20250321:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h6.0.0.3382
cpe:2.3:o:qnap:quts_hero:h6.0.0.3382:build_20260122:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.2.0.2802
cpe:2.3:o:qnap:quts_hero:h5.2.0.2802:build_20240620:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Qts by Qnap

Product Information
Vendor Qnap
Product Qts
Version 5.2.2.2950
cpe:2.3:o:qnap:qts:5.2.2.2950:build_20241114:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.2.5.3138
cpe:2.3:o:qnap:quts_hero:h5.2.5.3138:build_20250519:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.3.3.3424
cpe:2.3:o:qnap:quts_hero:h5.3.3.3424:build_20260305:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Qts by Qnap

Product Information
Vendor Qnap
Product Qts
Version 5.2.0.2802
cpe:2.3:o:qnap:qts:5.2.0.2802:build_20240620:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Qts by Qnap

Product Information
Vendor Qnap
Product Qts
Version 5.2.4.3070
cpe:2.3:o:qnap:qts:5.2.4.3070:build_20250312:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.2.1.2940
cpe:2.3:o:qnap:quts_hero:h5.2.1.2940:build_20241105:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.3.2.3354
cpe:2.3:o:qnap:quts_hero:h5.3.2.3354:build_20251225:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Qts by Qnap

Product Information
Vendor Qnap
Product Qts
Version 5.2.3.3006
cpe:2.3:o:qnap:qts:5.2.3.3006:build_20250108:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Qts by Qnap

Product Information
Vendor Qnap
Product Qts
Version 5.2.4.3092
cpe:2.3:o:qnap:qts:5.2.4.3092:build_20250403:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.2.0.2823
cpe:2.3:o:qnap:quts_hero:h5.2.0.2823:build_20240711:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.2.0.2860
cpe:2.3:o:qnap:quts_hero:h5.2.0.2860:build_20240817:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.2.8.3359
cpe:2.3:o:qnap:quts_hero:h5.2.8.3359:build_20251225:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.3.1.3292
cpe:2.3:o:qnap:quts_hero:h5.3.1.3292:build_20251024:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Qts by Qnap

Product Information
Vendor Qnap
Product Qts
Version 5.2.8.3350
cpe:2.3:o:qnap:qts:5.2.8.3350:build_20251216:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.2.0.2851
cpe:2.3:o:qnap:quts_hero:h5.2.0.2851:build_20240808:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.2.6.3195
cpe:2.3:o:qnap:quts_hero:h5.2.6.3195:build_20250715:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h6.0.0.3324
cpe:2.3:o:qnap:quts_hero:h6.0.0.3324:build_20251125:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Qts by Qnap

Product Information
Vendor Qnap
Product Qts
Version 5.2.0.2823
cpe:2.3:o:qnap:qts:5.2.0.2823:build_20240711:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Qts by Qnap

Product Information
Vendor Qnap
Product Qts
Version 5.2.5.3145
cpe:2.3:o:qnap:qts:5.2.5.3145:build_20250526:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.2.3.3006
cpe:2.3:o:qnap:quts_hero:h5.2.3.3006:build_20250108:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.2.0.2737
cpe:2.3:o:qnap:quts_hero:h5.2.0.2737:build_20240417:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.2.0.2789
cpe:2.3:o:qnap:quts_hero:h5.2.0.2789:build_20240607:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.2.1.2929
cpe:2.3:o:qnap:quts_hero:h5.2.1.2929:build_20241025:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.3.0.3145
cpe:2.3:o:qnap:quts_hero:h5.3.0.3145:build_20250530:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Qts by Qnap

Product Information
Vendor Qnap
Product Qts
Version 5.2.6.3229
cpe:2.3:o:qnap:qts:5.2.6.3229:build_20250818:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Qts by Qnap

Product Information
Vendor Qnap
Product Qts
Version 5.2.1.2930
cpe:2.3:o:qnap:qts:5.2.1.2930:build_20241025:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Qts by Qnap

Product Information
Vendor Qnap
Product Qts
Version 5.2.8.3332
cpe:2.3:o:qnap:qts:5.2.8.3332:build_20251128:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.2.8.3350
cpe:2.3:o:qnap:quts_hero:h5.2.8.3350:build_20251216:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.3.0.3192
cpe:2.3:o:qnap:quts_hero:h5.3.0.3192:build_20250716:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Quts Hero by Qnap

Product Information
Vendor Qnap
Product Quts Hero
Version h5.2.2.2952
cpe:2.3:o:qnap:quts_hero:h5.2.2.2952:build_20241116:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Qts by Qnap

Product Information
Vendor Qnap
Product Qts
Version 5.2.0.2737
cpe:2.3:o:qnap:qts:5.2.0.2737:build_20240417:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Qts by Qnap

Product Information
Vendor Qnap
Product Qts
Version 5.2.0.2860
cpe:2.3:o:qnap:qts:5.2.0.2860:build_20240817:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.qnap.com/en/security-advisory/qsa-26-10
https://www.qnap.com/en/security-advisory/qsa-26-10