CVE-2025-66276

Published: Giu 10, 2026 Last Modified: Giu 12, 2026
ExploitDB:
Other exploit source:
Google Dorks:
CRITICAL 9,2
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
CRITICAL 9,8
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high

Description

AI Translation Available

QuTS hero is not affected.

We have already fixed the vulnerability in the following version:
QTS 5.2.7.3256 build 20250913 and later

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0005
Percentile
0,1th
Updated

EPSS Score Trend (Last 5 Days)

Operating System

Qts by Qnap

Product Information
Vendor Qnap
Product Qts
Version Range Affected
From 4.3.0 (inclusive)
To 5.2.7.3256 (exclusive)
cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.qnap.com/en/security-advisory/qsa-25-56
https://www.qnap.com/en/security-advisory/qsa-25-56