CVE-2025-66276

CriticalCVSS 9.8

Published: 10/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

Summary

The vulnerability affects QTS (QNAP operating system). The vendor confirms QuTS hero is not affected. The fix is included in QTS 5.2.7.3256 build 20250913 and later.

Risk Assessment

An attacker could exploit the vulnerability in QTS to compromise the QNAP device, potentially leading to data loss or takeover.

Recommendation

Upgrade QTS to version 5.2.7.3256 or later.

Original NVD description (English source)

QuTS hero is not affected. We have already fixed the vulnerability in the following version: QTS 5.2.7.3256 build 20250913 and later