Main Vulnerability Database SB2026010585

SB2026010585 - Multiple vulnerabilities in QNAP QTS and QuTS hero

Published: January 5, 2026

Security Bulletin ID SB2026010585

CSH Severity

Medium

Patch available

YES

Number of vulnerabilities 20

Exploitation vector Remote access

Highest impact Denial of service

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 20 vulnerabilities.

1) Buffer overflow (CVE-ID: CVE-2025-52863)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to a boundary error. A remote user can trigger memory corruption and modify memory or crash processes on the target system.

2) Allocation of Resources Without Limits or Throttling (CVE-ID: CVE-2025-57705)

CWE-ID: CWE-770 - Allocation of Resources Without Limits or Throttling

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote user to perform a denial of service (DoS) attack.

The vulnerability exists due to allocation of resources without limits or throttling. A remote administrator can pass specially crafted input to the application and perform a denial of service (DoS) attack.

3) Allocation of Resources Without Limits or Throttling (CVE-ID: CVE-2025-47208)

CWE-ID: CWE-770 - Allocation of Resources Without Limits or Throttling

CVSSv4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to allocation of resources without limits or throttling. A remote user can pass specially crafted input to the application and perform a denial of service (DoS) attack.

4) Out-of-bounds read (CVE-ID: CVE-2025-54166)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition. A remote administrator can trigger an out-of-bounds read error and read contents of memory on the system.

5) Out-of-bounds read (CVE-ID: CVE-2025-54165)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition. A remote administrator can trigger an out-of-bounds read error and read contents of memory on the system.

6) Out-of-bounds read (CVE-ID: CVE-2025-54164)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition. A remote administrator can trigger an out-of-bounds read error and read contents of memory on the system.

7) Format string error (CVE-ID: CVE-2025-53591)

CWE-ID: CWE-134 - Use of Externally-Controlled Format String

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote user to compromise the target system.

The vulnerability exists due to a format string error. A remote administrator can supply a specially crafted input that contains format string specifiers and obtain secret data or modify memory on the target system.

8) Buffer overflow (CVE-ID: CVE-2025-53593)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote user to compromise the target system.

The vulnerability exists due to a boundary error. A remote administrator can trigger memory corruption and modify memory or crash processes on the target system.

9) Buffer overflow (CVE-ID: CVE-2025-52872)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to a boundary error. A remote user can trigger memory corruption and modify memory or crash processes on the target system.

10) Buffer overflow (CVE-ID: CVE-2025-52864)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to a boundary error. A remote user can trigger memory corruption and modify memory or crash processes on the target system.

11) NULL pointer dereference (CVE-ID: CVE-2025-44013)