CVE-2025-48725: QuTS hero

Q: What is the severity of CVE-2025-48725?

CVE-2025-48725 is classified as a buffer overflow vulnerability which can lead to memory modification or process crashes if exploited.

Q: How do I fix CVE-2025-48725?

To fix CVE-2025-48725, upgrade your QNAP operating system to a version beyond h5.3.2.3354.

Q: Which QNAP products are affected by CVE-2025-48725?

CVE-2025-48725 affects multiple versions of QNAP's QuTS hero and QTS operating systems.

Q: Can CVE-2025-48725 be exploited remotely?

Yes, CVE-2025-48725 can be exploited remotely if the attacker has gained user account access.

Q: What types of attacks are possible due to CVE-2025-48725?

Exploitation of CVE-2025-48725 may allow attackers to alter memory or crash affected processes.

Published Feb 11, 2026

Updated

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes.

We have already fixed the vulnerability in the following version: QuTS hero h5.3.2.3354 build 20251225 and later

Affected Software

38 affected components

QNAP QuTS hero<h5.3.2.3354

QNAP QTS=5.2.0.2737-build_20240417

QNAP QTS=5.2.0.2744-build_20240424

QNAP QTS=5.2.0.2782-build_20240601

QNAP QTS=5.2.0.2802-build_20240620

QNAP QTS=5.2.0.2823-build_20240711

QNAP QTS=5.2.0.2851-build_20240808

QNAP QTS=5.2.0.2860-build_20240817

QNAP QTS=5.2.1.2930-build_20241025

QNAP QTS=5.2.2.2950-build_20241114

QNAP QTS=5.2.3.3006-build_20250108

QNAP QTS=5.2.4.3070-build_20250312

QNAP QTS=5.2.4.3079-build_20250321

QNAP QTS=5.2.4.3092-build_20250403

QNAP QTS=5.2.5.3145-build_20250526

QNAP QTS=5.2.6.3195-build_20250715

QNAP QTS=5.2.6.3229-build_20250818

QNAP QTS=5.2.7.3256-build_20250913

QNAP QTS=5.2.7.3297-build_20251024

QNAP QTS=5.2.8.3332-build_20251128

QNAP QuTS hero=h5.2.0.2737-build_20240417

QNAP QuTS hero=h5.2.0.2782-build_20240601

QNAP QuTS hero=h5.2.0.2789-build_20240607

QNAP QuTS hero=h5.2.0.2802-build_20240620

QNAP QuTS hero=h5.2.0.2823-build_20240711

QNAP QuTS hero=h5.2.0.2851-build_20240808

QNAP QuTS hero=h5.2.0.2860-build_20240817

QNAP QuTS hero=h5.2.1.2929-build_20241025

QNAP QuTS hero=h5.2.1.2940-build_20241105

QNAP QuTS hero=h5.2.2.2952-build_20241116

QNAP QuTS hero=h5.2.3.3006-build_20250108

QNAP QuTS hero=h5.2.4.3070-build_20250312

QNAP QuTS hero=h5.2.4.3079-build_20250321

QNAP QuTS hero=h5.2.5.3138-build_20250519

QNAP QuTS hero=h5.2.6.3195-build_20250715

QNAP QuTS hero=h5.2.7.3256-build_20250913

QNAP QuTS hero=h5.2.7.3297-build_20251024

QNAP QuTS hero=h5.2.8.3321-build_20251117

Remediation

Information

We have already fixed the vulnerability in the following version: QuTS hero h5.3.2.3354 build 20251225 and later

Event History

Feb 11, 2026

CVE Published

via MITRE·12:19 PM

Data Sourced

via MITRE·12:19 PM

RemedyDescriptionWeakness

Data Sourced

via NVD·01:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-48725?

CVE-2025-48725 is classified as a buffer overflow vulnerability which can lead to memory modification or process crashes if exploited.

How do I fix CVE-2025-48725?