CVE-2025-62849

CRITIQUE 9.8CVE-2025-62849 · Published 16/12/2025 · updated 07/10/2026

En bref

CVE-2025-62849 est une vulnérabilité CRITIQUE (CVSS 9.8).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.97%, plus élevée que 61.7% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

An SQL injection vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3297 build 20251024 and later QuTS hero h5.2.7.3297 build 20251024 and later QuTS hero h5.3.1.3292 build 20251024 and later

References

qnap.com/en/security-advisory/qsa-25-45 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free