QNAP has warned customers of security flaw in some of their products. A remote attacker can exploit these vulnerabilities to trigger denial of service condition, sensitive information disclosure and data manipulation on the targeted system.

The vulnerability currently affects the following QNAP operating system - QTS 5.2.x, the QuTS hero h5.2.x, and the QuTS hero h5.3.x series. Vulnerabilities were fixed in versions QTS 5.2.8.3332 build 20251128, QuTS hero h5.2.8.3321 build 20251117 and QuTS hero h5.3.1.3250 build 20250912.

More information on vulnerability and updates is available in QNAP security advisory – qnap.com