CVE-2025-66280Disclosure(qnap / qts)

LOWCVSS 7.2 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3410 build 20260214 and later QuTS hero h5.2.9.3410 build 20260214 and later QuTS hero h5.3.4.3500 build 20260520 and later QuTS hero h6.0.0.3397 build 20260206 and later

qnap CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.qnap.com/en/security-advisory/qsa-26-10

Weakness type (CWE)

CWE-121CWE-190

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

qts
quts_hero

Threat summary

3 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 3 classified signals
Peaked at 2 mentions on most recent observed day (2026-07-07)
3 total mentions across 2 days

Affected systems

Vendors

qnap

Products

qtsquts_hero

Deep dive

Activity timeline3 mentions / 2d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-10	1	Disclosure1
2026-07-07	2	Disclosure2

Full discourse3 posts

Bechir Bouali@b3ch1r109d
Disclosure
7/7 QNAP Advisory: https://www.qnap.com/en/security-advisory/qsa-26-10 CVE records: https://www.cve.org/CVERecord?id=CVE-2025-66279 https://www.cve.org/CVERecord?id=CVE-2025-66280 https://www.cve.org/CVERecord?id=CVE-2025-66281
Post summary
The post links to a QNAP security advisory and three CVE record URLs, indicating a disclosure of potential vulnerabilities but providing no details on exploitation, mitigation, or proof of concept.
10020140
163 followersView on X
Bechir Bouali@b3ch1r109d
Disclosure
4/7 CVE-2025-66280: signedness mishandling → stack frame manipulation (CVSS 5.1), post-auth Technique: emulation-based fuzzing {LibAFL + QEMU + Nautilus} Emulated the AArch64 endpoint in QEMU, then fed it grammar-aware mutated CGI input to reach deep parsing code.
Post summary
The text announces CVE‑2025‑66280, a signedness mishandling stack‑frame manipulation vulnerability (CVSS 5.1, post‑auth), discovered through emulation‑based fuzzing with LibAFL, QEMU, and Nautilus, without providing exploit code, patch, or evidence of active exploitation.
10020135
163 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds136d
Disclosure
CVE-2025-66280 Integer Overflow Vulnerability in QNAP Operating System Versions Before ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-66280 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The post announces the new CVE-2025-66280, describing it as an integer overflow in QNAP OS versions before a certain date, and provides a link to a vulnerability notification.
0000064
4.0K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	qnap	qts	-	-	-
OS	qnap	quts_hero	-	-	-

Explore more

Back to dashboard qnap CVEs qts vulnerabilities

What researchers are saying

CVE-2025-66280

Bechir Bouali@b3ch1rDisclosure

The post links to a QNAP security advisory and three CVE record URLs, indicating a disclosure of potential vulnerabilities but providing no details on exploitation, mitigation, or proof of concept.

Bechir Bouali@b3ch1rDisclosure

The text announces CVE‑2025‑66280, a signedness mishandling stack‑frame manipulation vulnerability (CVSS 5.1, post‑auth), discovered through emulation‑based fuzzing with LibAFL, QEMU, and Nautilus, without providing exploit code, patch, or evidence of active exploitation.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The post announces the new CVE-2025-66280, describing it as an integer overflow in QNAP OS versions before a certain date, and provides a link to a vulnerability notification.