QNAP Patches Seven Critical Zero-Day Vulnerabilities Post Pwn2Own 2025

QNAP Patches Seven Critical Zero-Day Vulnerabilities Post Pwn2Own 2025

First seen 2 Dec 2025, 18:33 UTC BleepingcomputerRedhotcyberHeise.DeSocradar 82% similarity 57.4

Article Content

Browse articles
ThreatCluster

QNAP has released security updates addressing seven zero-day vulnerabilities in its NAS systems, including QTS and QuTS hero, as well as several applications. These vulnerabilities were exploited during the Pwn2Own Ireland 2025 competition, with specific CVE entries identified for each flaw. Users are advised to update their systems to mitigate potential risks.

ThreatCluster AI

Community

Browse all →