Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
QuTS hero is not affected. We have already fixed the vulnerability in the following version: QTS 5.2.7.3256 build 20250913 and later
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-10 | 1 | Patch1 |
| 2026-06-11 | 1 | Patch1 |
| 2026-06-23 | 1 | General1 |
| 2026-06-27 | 1 | General1 |
[CVE Analysis] CVE-2025-66276: QNAP QTS Flaw and the NAS Blind Spot in OT Networks https://breachspider.com/intel/2026-06-27-cve-2025-66276-qnap-qts-flaw-and-the-nas-blind-spot-in-ot-ne #ICS #OTSecurity #SCADA #CriticalInfrastructure
Post summary
The provided text merely identifies CVE-2025-66276 and references a source link, without any additional technical or operational details.
⚠️ Vulnerabilidades en productos QNAP ❗ CVE-2026-41539 ❗ CVE-2026-24719 ❗ CVE-2025-66276 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-qnap-4/ https://t.co/YcxLQIclQv
Post summary
The tweet simply announces several QNAP CVEs and links to an external page for more information, with no additional details provided.
CVE-2025-66276 (CVSS 9.2) fixed in QTS 5.2.7.3256 build 20250913 and later. QNAP users should update. https://nvd.nist.gov/vuln/detail/CVE-2025-66276 via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/lHa0wuva5A
Post summary
The tweet announces that CVE‑2025‑66276 (CVSS 9.2) is fixed in QTS 5.2.7.3256 build 20250913 and urges QNAP users to update.
🚨High - QNAP QTS NFS Access-Control Vulnerability (CVE-2025-66276) QNAP disclosed an access-control flaw in legacy QTS environments that have the NFS (Network File System) service enabled. With permissive NFS share settings - such as a wildcard host entry and no user squashing - an attacker can perform unauthorized actions on exported shares and potentially access data on the NAS. It is network-reachable, needs no authentication or user interaction, and carries high confidentiality, integrity, and availability impact, though the NFS service must be enabled and misconfigured to exploit it. QuTS hero is not affected. Worth noting: the CVE record scores it 9.2 Critical (CVSS v4.0) while QNAP's own advisory labels it Moderate. 👉Update QTS to 5.2.7.3256 build 20250913 or later, and harden NFS share permissions (replace wildcard hosts with specific IPs and enable "Squash all users").
Post summary
QNAP announced a critical NFS access‑control vulnerability (CVE‑2025‑66276) and advises updating to QTS 5.2.7.3256 and tightening NFS permissions; no active exploitation or PoC is reported.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | qnap | qts | - | - | - |