PatchTheCVEquts hero vulnerabilities and fixes
Recent CVEs affecting quts hero, with upgrade or downgrade steps. 9 tracked.
Also searched as: qutshero.
quts hero has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 9. Most recent: 2026-06-10. Highest priority: CVE-2025-66273 (score 41/100).
- CVE-2025-62850 HIGH 7.2 UPGRADE A NULL pointer dereference vulnerability has been reported to affect QTS, QVP, QuTS cloud and QuTS hero
- CVE-2025-66273 HIGH 7.2 UPGRADE UPGRADE A command injection vulnerability has been reported to affect several QNAP operating system versions
- CVE-2025-66279 HIGH 7.2 UPGRADE UPGRADE A command injection vulnerability has been reported to affect several QNAP operating system versions
- CVE-2026-22893 HIGH 7.2 UPGRADE UPGRADE A command injection vulnerability has been reported to affect several QNAP operating system versions
- CVE-2026-24719 HIGH 7.2 UPGRADE UPGRADE A command injection vulnerability has been reported to affect several QNAP operating system versions
- CVE-2025-66280 HIGH 7.2 UPGRADE UPGRADE An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system vers
- CVE-2025-66281 HIGH 7.2 UPGRADE UPGRADE A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions
- CVE-2026-24716 HIGH 7.2 UPGRADE UPGRADE A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions
- CVE-2026-24717 MEDIUM 6.5 UPGRADE UPGRADE A path traversal vulnerability has been reported to affect several QNAP operating system versions
FAQ
How do I fix quts hero vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is quts hero being exploited right now?
None of the tracked quts hero CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which quts hero CVE should I patch first?
CVE-2025-66273 currently ranks highest (41/100): A command injection vulnerability has been reported to affect several QNAP operating system versions.