High severity · published Jun 10, 2026
CVE-2025-62850
NULL Pointer Dereference in networkRequest.cgi
7.2
CVSS
0.4%
EPSS
No
On KEV
Description
A NULL pointer dereference vulnerability has been reported to affect QTS, QVP, QuTS cloud and QuTS hero. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.
We have already fixed the vulnerability in the following version:
QTS 5.2.9.3410 build 20260214 and later
QVP 2.7.4 and later
QuTS cloud c5.2.9.3468 build 20260413 and later
QuTS hero h5.2.9.3410 build 20260214 and later
QuTS hero h5.3.4.3500 build 20260520 and later
QuTS hero h6.0.0.3459 build 20260409 and later
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 38% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QT
QTS · QNAP Systems Inc.
5.2.x before 5.2.9.3410 build 20260214 · source: vendor
QV
QVP · QNAP Systems Inc.
2.7.x before 2.7.4 · source: vendor
QC
QuTS cloud · QNAP Systems Inc.
c5.2.x before c5.2.9.3468 build 20260413 · source: vendor
QH
QuTS hero · QNAP Systems Inc.
h5.2.x before h5.2.9.3410 build 20260214; h5.3.x before h5.3.4.3500 build 20260520; h6.0.x before h6.0.0.3459 build 20260409 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-62850
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-62850
www.qnap.com
https://www.qnap.com/en/release-notes/qts/5.2.9.3410/20260214
www.qnap.com
https://www.qnap.com/en/release-notes/quts_hero/h5.2.9.3410/20260214
www.qnap.com
https://www.qnap.com/en/release-notes/quts_hero/h5.3.4.3500/20260520
www.qnap.com
https://www.qnap.com/en/release-notes/quts_hero/h6.0.0.3459/20260409
www.qnap.com
https://www.qnap.com/en/release-notes/qutscloud/c5.2.9.3468/20260413
www.qnap.com
https://www.qnap.com/en/release-notes/qvp/2.7.5.1691/20260818
More from QTS
9.8
CVE-2020-2509
Command Injection Vulnerability in QTS and QuTS hero
9.8
CVE-2018-19949
QNAP NAS File Station Command Injection Vulnerability
6.1
CVE-2018-19953
QNAP NAS File Station Cross-Site Scripting Vulnerability
5.4
CVE-2018-19943
QNAP NAS File Station Cross-Site Scripting Vulnerability
9.8
CVE-2025-66276
QuTS hero is not affected
