QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-58466

Back to search

CVE-2025-58466

Published: Feb 11, 2026

Modified: Feb 11, 2026

PUBLISHED

Description

A use of uninitialized variable vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to denial of service conditions, or modify control flow in unexpected ways. We have already fixed the vulnerability in the following versions: QTS 5.2.8.3332 build 20251128 and later QuTS hero h5.2.8.3321 build 20251117 and later

VendorProductVersions

QNAP Systems Inc.

QTS

affected
5.2.x - < 5.2.8.3332 build 20251128

QNAP Systems Inc.

QuTS hero

affected
h5.2.x - < h5.2.8.3321 build 20251117

Weaknesses (CWE)

CWE-457

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now