CVE-2025-62850
NULL Pointer Dereference in networkRequest.cgi
Description
A NULL pointer dereference vulnerability has been reported to affect QTS, QVP, QuTS cloud and QuTS hero. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: QTS 5.2.9.3410 build 20260214 and later QVP 2.7.4 and later QuTS cloud c5.2.9.3468 build 20260413 and later QuTS hero h5.2.9.3410 build 20260214 and later QuTS hero h5.3.4.3500 build 20260520 and later QuTS hero h6.0.0.3459 build 20260409 and later
INFO
Published Date :
June 10, 2026, 4:17 a.m.
Last Modified :
Oct. 15, 2026, 8:16 a.m.
Remotely Exploit :
Yes !
Source :
[email protected]
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | |||||
| CVSS 3.1 | HIGH | [email protected] | ||||
| CVSS 4.0 | MEDIUM | 2fd009eb-170a-4625-932b-17a53af1051f | ||||
| CVSS 4.0 | MEDIUM | [email protected] | ||||
| CVSS 4.0 | LOW | [email protected] |
Solution
- Update QuTS hero to h5.2.9.3410 or later.
- Update QuTS hero to h5.3.4.3500 or later.
- Update QuTS hero to h6.0.0.3459 or later.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2025-62850.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2025-62850 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2025-62850
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2025-62850 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2025-62850 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by [email protected]
Oct. 15, 2026
Action Type Old Value New Value Added CVSS V4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Removed CVSS V4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X -
CVE Modified by [email protected]
Oct. 15, 2026
Action Type Old Value New Value Changed Description A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QuTS hero h5.2.9.3410 build 20260214 and later QuTS hero h5.3.4.3500 build 20260520 and later QuTS hero h6.0.0.3459 build 20260409 and later A NULL pointer dereference vulnerability has been reported to affect QTS, QVP, QuTS cloud and QuTS hero. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: QTS 5.2.9.3410 build 20260214 and later QVP 2.7.4 and later QuTS cloud c5.2.9.3468 build 20260413 and later QuTS hero h5.2.9.3410 build 20260214 and later QuTS hero h5.3.4.3500 build 20260520 and later QuTS hero h6.0.0.3459 build 20260409 and later Added CVSS V4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Removed CVSS V4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Added Affected Affected value modified. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2025/62xxx/CVE-2025-62850.json">CVE-2025-62850</a> Added Reference https://www.qnap.com/en/release-notes/qts/5.2.9.3410/20260214 Added Reference https://www.qnap.com/en/release-notes/quts_hero/h5.2.9.3410/20260214 Added Reference https://www.qnap.com/en/release-notes/quts_hero/h5.3.4.3500/20260520 Added Reference https://www.qnap.com/en/release-notes/quts_hero/h6.0.0.3459/20260409 Added Reference https://www.qnap.com/en/release-notes/qutscloud/c5.2.9.3468/20260413 Added Reference https://www.qnap.com/en/release-notes/qvp/2.7.5.1691/20260818 Removed Reference https://www.qnap.com/en/security-advisory/qsa-26-38 Removed Reference Type https://www.qnap.com/en/security-advisory/qsa-26-38 Types: Broken Link -
CVE Translated by [email protected]
Jul. 23, 2026
Action Type Old Value New Value Added Translation Title: QuTS hero de QNAP Systems, Description: Una vulnerabilidad de desreferencia de puntero NULL ha sido reportada que afecta a varias versiones del sistema operativo QNAP. Si un atacante remoto obtiene una cuenta de administrador, puede entonces explotar la vulnerabilidad para lanzar un ataque de denegación de servicio (DoS). Ya hemos corregido la vulnerabilidad en las siguientes versiones: QuTS hero h5.2.9.3410 build 20260214 y posteriores QuTS hero h5.3.4.3500 build 20260520 y posteriores QuTS hero h6.0.0.3459 build 20260409 y posteriores -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Jun. 17, 2026
Action Type Old Value New Value Added SSVC {'id': 'CVE-2025-62850', 'role': 'CISA Coordinator', 'options': [{'exploitation': 'none'}, {'automatable': 'no'}, {'technicalImpact': 'partial'}], 'version': '2.0.3', 'timestamp': '2026-06-10T15:57:33.151942Z'} -
CVE Modified by [email protected]
Jun. 17, 2026
Action Type Old Value New Value Added Affected [{'vendor': 'QNAP Systems Inc.', 'product': 'QuTS hero', 'versions': [{'status': 'affected', 'version': 'h5.2.0', 'lessThan': 'h5.2.9.3410 build 20260214', 'versionType': 'custom'}, {'status': 'affected', 'version': 'h5.3.0', 'lessThan': 'h5.3.4.3500 build 20260520', 'versionType': 'custom'}, {'status': 'affected', 'version': '?', 'lessThan': 'h6.0.0.3459 build 20260409', 'versionType': 'custom'}], 'defaultStatus': 'unaffected'}] -
Initial Analysis by [email protected]
Jun. 15, 2026
Action Type Old Value New Value Added CVSS V3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Added CPE Configuration OR *cpe:2.3:o:qnap:quts_hero:*:*:*:*:*:*:*:* versions from (including) h5.3.0.3115 up to (excluding) h5.3.4.3500 *cpe:2.3:o:qnap:quts_hero:*:*:*:*:*:*:*:* versions from (including) h6.0.0.3324 up to (excluding) h6.0.0.3459 *cpe:2.3:o:qnap:quts_hero:*:*:*:*:*:*:*:* versions from (including) h5.2.0.2737 up to (excluding) h5.2.9.3410 Added Reference Type QNAP Systems, Inc.: https://www.qnap.com/en/security-advisory/qsa-26-38 Types: Broken Link -
New CVE Received by [email protected]
Jun. 10, 2026
Action Type Old Value New Value Added Description A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QuTS hero h5.2.9.3410 build 20260214 and later QuTS hero h5.3.4.3500 build 20260520 and later QuTS hero h6.0.0.3459 build 20260409 and later Added CVSS V4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Added CWE CWE-476 Added Reference https://www.qnap.com/en/security-advisory/qsa-26-38