CVE-2025-11837: Malware Remover

Published Jan 2, 2026
·
Updated

An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection mechanism.

We have already fixed the vulnerability in the following version: Malware Remover 6.6.8.20251023 and later

Affected Software

2 affected components
Malware Remover Malware Remover<6.6.8.20251023
QNAP Malware Remover>=6.6.3<6.6.8.20251023

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade Malware Remover to a version that resolves this vulnerability.

    Fixed in 6.6.8.20251023

Event History

Nov 7, 2025
News Published
via BleepingComputer·06:24 PM
News Published
via BleepingComputer·06:25 PM
Jan 2, 2026
CVE Published
via MITRE·03:51 PM
Data Sourced
via MITRE·03:51 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Jun 21, 2026
News Published
via BleepingComputer·02:14 PM
Dec 23, 58440
Event
via NVD·06:22 PM

Frequently Asked Questions

1

What is the severity of CVE-2025-11837?

CVE-2025-11837 is considered to be a serious vulnerability due to its potential to allow remote attackers to bypass the protection mechanisms of Malware Remover.

2

How do I fix CVE-2025-11837?

To fix CVE-2025-11837, update Malware Remover to version 6.6.8.202510 or later.

3

What type of vulnerability is CVE-2025-11837?

CVE-2025-11837 is classified as an improper control of generation of code vulnerability.

4

Which products are affected by CVE-2025-11837?

CVE-2025-11837 affects Malware Remover versions prior to 6.6.8.202510.

5

Can CVE-2025-11837 be exploited remotely?

Yes, CVE-2025-11837 can be exploited by remote attackers who can bypass the Malware Remover's protection mechanisms.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203