Vulnerability in Qnap Systems Inc. Qts

CVE-2025-59382

QTS, QuTS hero, QuTScloud are not affected. We have already fixed the vulnerability in the following version:

EPSS: 0.004 (29.5th percentile) — read the EPSS interpretation.

Affected products

Qnap Systems Inc. Qts — versions ?
Qnap Systems Inc. Qutscloud — versions c5.0.0
Qnap Systems Inc. Quts Hero — versions ?

Weakness classification (CWE)

CWE-472

Public proof-of-concept exploits

Rat5ak/CVE-2025-59382-QNAP-Password-Reset-Account-Takeover

References

security@qnapsecurity.com.tw

Frequently asked questions

What is CVE-2025-59382?: CVE-2025-59382 is a vulnerability in Qnap Systems Inc. Qts, classified under CWE-472. Published 2026-06-10.
Is CVE-2025-59382 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.