QNAP QuTS hero NULL ptr DoS (pre 5.3.4/6.0)
CVE-2025-62850 Published on June 10, 2026

NULL Pointer Dereference in networkRequest.cgi
A NULL pointer dereference vulnerability has been reported to affect QTS, QVP, QuTS cloud and QuTS hero. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: QTS 5.2.9.3410 build 20260214 and later QVP 2.7.4 and later QuTS cloud c5.2.9.3468 build 20260413 and later QuTS hero h5.2.9.3410 build 20260214 and later QuTS hero h5.3.4.3500 build 20260520 and later QuTS hero h6.0.0.3459 build 20260409 and later

NVD

Vulnerability Analysis

CVE-2025-62850 is exploitable with network access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.

Attack Vector:

NETWORK

Attack Complexity:

LOW

Privileges Required:

HIGH

User Interaction:

NONE

Weakness Type

NULL Pointer Dereference

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. NULL pointer dereference issues can occur through a number of flaws, including race conditions, and simple programming omissions.

Products Associated with CVE-2025-62850

Want to know whenever a new CVE is published for QNAP products? stack.watch will email you.

QNAP Quts Hero

QNAP Qts

QNAP Qutscloud

Affected Versions

QNAP Systems Inc. QTS:

Version 5.2.x and below 5.2.9.3410 build 20260214 is affected.

QNAP Systems Inc. QVP:

Version 2.7.x and below 2.7.4 is affected.

QNAP Systems Inc. QuTS cloud:

Version c5.2.x and below c5.2.9.3468 build 20260413 is affected.

QNAP Systems Inc. QuTS hero:

Version h5.2.x and below h5.2.9.3410 build 20260214 is affected.
Version h5.3.x and below h5.3.4.3500 build 20260520 is affected.
Version h6.0.x and below h6.0.0.3459 build 20260409 is affected.

Exploit Probability

EPSS

0.33%

Percentile

23.74%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.