Approved changes feed: RSS · Atom

cpe:2.3:o:qnap:quts_hero:h5.2.6.3195:build_20250715:*:*:*:*:*:*

part: o version: h5.2.6.3195 update: build_20250715

VendorQnap (a402dda4-b7da-50eb-b0f8-700e564ee87d)
ProductQuts Hero (c808c21e-6b74-58ae-ac08-bf1b891081da)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9110 vulnerable 2026-06-08 07:45:21.740586 QTS, QuTS hero
An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following versions: QTS 5.2.8.3332 build 20251128 and later QuTS hero h5.2.8.3321 build 20251117 and later QuTS hero h5.3.1.3250 build 20250912 and later
Published: 2026-01-02T15:17:29.481Z
Updated: 2026-01-02T19:14:42.164Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-66277 vulnerable 2026-06-08 07:41:18.517830 QTS, QuTS hero
A link following vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to traverse the file system to unintended locations. We have already fixed the vulnerability in the following versions: QTS 5.2.8.3350 build 20251216 and later QuTS hero h5.3.2.3354 build 20251225 and later QuTS hero h5.2.8.3350 build 20251216 and later
Published: 2026-02-11T12:15:43.851Z
Updated: 2026-02-26T14:44:26.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62852 vulnerable 2026-06-08 07:39:16.855263 QTS, QuTS hero
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: QTS 5.2.8.3332 build 20251128 and later
Published: 2026-01-02T15:19:40.492Z
Updated: 2026-01-05T20:38:31.940Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62849 vulnerable 2026-06-08 07:39:16.818934 QTS, QuTS hero
An SQL injection vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3297 build 20251024 and later QuTS hero h5.2.7.3297 build 20251024 and later QuTS hero h5.3.1.3292 build 20251024 and later
Published: 2025-12-16T02:24:58.273Z
Updated: 2026-02-26T16:07:33.754Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62848 vulnerable 2026-06-08 07:39:16.810654 QTS, QuTS hero
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3297 build 20251024 and later QuTS hero h5.2.7.3297 build 20251024 and later QuTS hero h5.3.1.3292 build 20251024 and later
Published: 2025-12-16T02:25:04.815Z
Updated: 2026-03-18T03:55:46.939Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62847 vulnerable 2026-06-08 07:39:16.802807 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59385 vulnerable 2026-06-08 07:35:21.813355 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59381 vulnerable 2026-06-08 07:35:21.799809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59380 vulnerable 2026-06-08 07:35:21.787912 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58466 vulnerable 2026-06-08 07:35:18.389195 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-57705 vulnerable 2026-06-08 07:33:15.995111 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54166 vulnerable 2026-06-08 07:33:11.712006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54165 vulnerable 2026-06-08 07:33:11.709103 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54164 vulnerable 2026-06-08 07:33:11.685837 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53596 vulnerable 2026-06-08 07:31:14.779319 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53593 vulnerable 2026-06-08 07:31:14.755304 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53592 vulnerable 2026-06-08 07:31:14.752692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53591 vulnerable 2026-06-08 07:31:14.750317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53590 vulnerable 2026-06-08 07:31:14.742789 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53589 vulnerable 2026-06-08 07:31:14.740469 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53414 vulnerable 2026-06-08 07:31:14.488001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53405 vulnerable 2026-06-08 07:31:14.479175 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52872 vulnerable 2026-06-08 07:31:13.113887 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52864 vulnerable 2026-06-08 07:31:13.076334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52863 vulnerable 2026-06-08 07:31:13.074167 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52431 vulnerable 2026-06-08 07:31:11.533466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52430 vulnerable 2026-06-08 07:31:11.530576 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52426 vulnerable 2026-06-08 07:31:11.515229 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48725 vulnerable 2026-06-08 07:29:11.244829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48721 vulnerable 2026-06-08 07:29:11.204349 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47208 vulnerable 2026-06-08 07:27:09.801594 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47205 vulnerable 2026-06-08 07:27:09.789790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-44013 vulnerable 2026-06-08 07:25:10.589848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.