CVE-2025-62850
published 2026-06-10CVE-2025-62850: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator…
PriorityP345high7.2CVSS 3.1
AVNACLPRHUINSUCHIHAH
EPSS
0.33%
25.1th percentile
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.
We have already fixed the vulnerability in the following versions:
QuTS hero h5.2.9.3410 build 20260214 and later
QuTS hero h5.3.4.3500 build 20260520 and later
QuTS hero h6.0.0.3459 build 20260409 and later
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| qnap | quts_hero | >= h5.2.0.2737 < h5.2.9.3410 | h5.2.9.3410 |
| qnap | quts_hero | >= h5.3.0.3115 < h5.3.4.3500 | h5.3.4.3500 |
| qnap | quts_hero | >= h6.0.0.3324 < h6.0.0.3459 | h6.0.0.3459 |
| qnap_systems_inc | quts_hero | >= ? < h6.0.0.3459 build 20260409 | h6.0.0.3459 build 20260409 |
| qnap_systems_inc | quts_hero | >= h5.2.0 < h5.2.9.3410 build 20260214 | h5.2.9.3410 build 20260214 |
| qnap_systems_inc | quts_hero | >= h5.3.0 < h5.3.4.3500 build 20260520 | h5.3.4.3500 build 20260520 |
CVSS provenance
nvdv3.17.2HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv4.05.1MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
QNAP QuTS hero 5.2.9.3410/5.3.4.3500/6.0.0.3459 null pointer dereference (qsa-26-38)
vuldb·2026-06-16·CVSS 7.2
CVE-2025-62850 [HIGH] QNAP QuTS hero 5.2.9.3410/5.3.4.3500/6.0.0.3459 null pointer dereference (qsa-26-38)
A vulnerability categorized as problematic has been discovered in QNAP QuTS hero 5.2.9.3410/5.3.4.3500/6.0.0.3459. Impacted is an unknown function. The manipulation results in null pointer dereference.
This vulnerability is identified as CVE-2025-62850. The attack can be executed remotely. There is not any exploit available.
It is advisable to upgrade the affected component.
GHSA
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
ghsa_unreviewed·2026-06-10
CVE-2025-62850 [MEDIUM] CWE-476 A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.
We have already fixed the vulnerability in the following versions:
QuTS hero h5.2.9.3410 build 20260214 and later
QuTS hero h5.3.4.3500 build 20260520 and later
QuTS hero h6.0.0.3459 build 20260409 and later
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-06-10
Published