CVE-2025-52429: A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating

Routine

MEDIUM 6.5MITIGATEMITIGATE

CVE-2025-52429 is a medium-severity flaw (CVSS 6.5) affecting qts, quts hero. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerability in the following versions: QTS 5.2.6.3195 build 20250715 and later QuTS hero h5.2.6.3195 build 20250715 and later

Why this priority

No elevated risk signals yet

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	6.5 (Medium)
Attack vector	Network (remote)
Attack complexity	Low
Privileges needed	High
User interaction	None
EPSS exploit chance	0.4% (top 70%)
CISA exploited list	No
Weakness	CWE-134
Published	2025-10-03
Last modified	2026-10-18

Publisher (CNA): QNAP Systems, Inc. · Vendor: qnap

Last updated 2026-10-18 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2025-10-03 19:15 UTCPublished CVE record published
2026-10-18 21:10 UTCUpdated Record last modified

qnap qts MITIGATE

Affected: 5.2.0.2737 build_20240417 · 5.2.0.2744 build_20240424 · 5.2.0.2782 build_20240601 · 5.2.0.2802 build_20240620 · 5.2.0.2823 build_20240711 · 5.2.0.2851 build_20240808 · 5.2.0.2860 build_20240817 · 5.2.1.2930 build_20241025

Fixed in: no fixed release known

Safe to downgrade to: a release before 5.2.0.2737

Check your OS release

cat /etc/os-release; uname -r

Debian / Ubuntu

sudo apt update && sudo apt full-upgrade

RHEL / Amazon Linux / Fedora

sudo dnf upgrade --refresh

Windows

Install the latest cumulative update from Windows Update

If no patch exists yet

OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.

qnap quts hero MITIGATE

Affected: h5.2.0.2737 build_20240417 · h5.2.0.2782 build_20240601 · h5.2.0.2789 build_20240607 · h5.2.0.2802 build_20240620 · h5.2.0.2823 build_20240711 · h5.2.0.2851 build_20240808 · h5.2.0.2860 build_20240817 · h5.2.1.2929 build_20241025

Fixed in: no fixed release known

Safe to downgrade to: a release before h5.2.0.2737

Check your OS release

cat /etc/os-release; uname -r

Debian / Ubuntu

sudo apt update && sudo apt full-upgrade

RHEL / Amazon Linux / Fedora

sudo dnf upgrade --refresh

Windows

Install the latest cumulative update from Windows Update

If no patch exists yet

OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2025-52429?

qts: mitigate or apply the listed mitigation; quts hero: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2025-52429 being exploited?

CVE-2025-52429 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2025-52429 affect?

CVE-2025-52429 affects qts, quts hero. Severity is medium (CVSS 6.5). A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret dat

How urgent is CVE-2025-52429?

Priority 30/100. No elevated risk signals yet.

Software pages

QNAP vulnerabilities

Related CVEs

CVE-2025-47212 HIGH 7.2 MITIGATE MITIGATE A command injection vulnerability has been reported to affect several QNAP operating system versions
CVE-2025-48730 MEDIUM 6.5 MITIGATE MITIGATE A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating
CVE-2025-53406 MEDIUM 6.5 MITIGATE MITIGATE A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating
CVE-2025-53407 MEDIUM 6.5 MITIGATE MITIGATE A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating
CVE-2025-47211 MEDIUM 4.9 MITIGATE MITIGATE A path traversal vulnerability has been reported to affect several QNAP operating system versions

References

← Back to latest CVEs