CVE-2025-66277 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2025-66277

Analyzed

More Info Official Page

Source-security@qnapsecurity.com.tw

Published At-11 Feb, 2026 | 13:15

Updated At-12 Feb, 2026 | 17:01

A link following vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to traverse the file system to unintended locations. We have already fixed the vulnerability in the following versions: QTS 5.2.8.3350 build 20251216 and later QuTS hero h5.3.2.3354 build 20251225 and later QuTS hero h5.2.8.3350 build 20251216 and later

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	9.2	CRITICAL	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 4.0

Base score: 9.2

Base severity: CRITICAL

Vector:

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Type: Primary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CPE Matches

QNAP Systems, Inc.

>>qts>>5.2.0.2737

cpe:2.3:o:qnap:qts:5.2.0.2737:build_20240417:*:*:*:*:*:*

QNAP Systems, Inc.

>>qts>>5.2.0.2744

cpe:2.3:o:qnap:qts:5.2.0.2744:build_20240424:*:*:*:*:*:*

QNAP Systems, Inc.

>>qts>>5.2.0.2782

cpe:2.3:o:qnap:qts:5.2.0.2782:build_20240601:*:*:*:*:*:*

QNAP Systems, Inc.

>>qts>>5.2.0.2802

cpe:2.3:o:qnap:qts:5.2.0.2802:build_20240620:*:*:*:*:*:*

QNAP Systems, Inc.

>>qts>>5.2.0.2823

cpe:2.3:o:qnap:qts:5.2.0.2823:build_20240711:*:*:*:*:*:*

QNAP Systems, Inc.

>>qts>>5.2.0.2851

cpe:2.3:o:qnap:qts:5.2.0.2851:build_20240808:*:*:*:*:*:*

QNAP Systems, Inc.

>>qts>>5.2.0.2860

cpe:2.3:o:qnap:qts:5.2.0.2860:build_20240817:*:*:*:*:*:*

QNAP Systems, Inc.

>>qts>>5.2.1.2930

cpe:2.3:o:qnap:qts:5.2.1.2930:build_20241025:*:*:*:*:*:*

QNAP Systems, Inc.

>>qts>>5.2.2.2950

cpe:2.3:o:qnap:qts:5.2.2.2950:build_20241114:*:*:*:*:*:*

QNAP Systems, Inc.

>>qts>>5.2.3.3006

cpe:2.3:o:qnap:qts:5.2.3.3006:build_20250108:*:*:*:*:*:*

QNAP Systems, Inc.

>>qts>>5.2.4.3070

cpe:2.3:o:qnap:qts:5.2.4.3070:build_20250312:*:*:*:*:*:*

QNAP Systems, Inc.

>>qts>>5.2.4.3079

cpe:2.3:o:qnap:qts:5.2.4.3079:build_20250321:*:*:*:*:*:*

QNAP Systems, Inc.

>>qts>>5.2.4.3092

cpe:2.3:o:qnap:qts:5.2.4.3092:build_20250403:*:*:*:*:*:*

QNAP Systems, Inc.

>>qts>>5.2.5.3145

cpe:2.3:o:qnap:qts:5.2.5.3145:build_20250526:*:*:*:*:*:*

QNAP Systems, Inc.

>>qts>>5.2.6.3195

cpe:2.3:o:qnap:qts:5.2.6.3195:build_20250715:*:*:*:*:*:*

QNAP Systems, Inc.

>>qts>>5.2.6.3229

cpe:2.3:o:qnap:qts:5.2.6.3229:build_20250818:*:*:*:*:*:*

QNAP Systems, Inc.

>>qts>>5.2.7.3256

cpe:2.3:o:qnap:qts:5.2.7.3256:build_20250913:*:*:*:*:*:*

QNAP Systems, Inc.

>>qts>>5.2.7.3297

cpe:2.3:o:qnap:qts:5.2.7.3297:build_20251024:*:*:*:*:*:*

QNAP Systems, Inc.

>>qts>>5.2.8.3332

cpe:2.3:o:qnap:qts:5.2.8.3332:build_20251128:*:*:*:*:*:*

QNAP Systems, Inc.

>>quts_hero>>h5.2.0.2737

cpe:2.3:o:qnap:quts_hero:h5.2.0.2737:build_20240417:*:*:*:*:*:*

QNAP Systems, Inc.

>>quts_hero>>h5.2.0.2782

cpe:2.3:o:qnap:quts_hero:h5.2.0.2782:build_20240601:*:*:*:*:*:*

QNAP Systems, Inc.

>>quts_hero>>h5.2.0.2789

cpe:2.3:o:qnap:quts_hero:h5.2.0.2789:build_20240607:*:*:*:*:*:*

QNAP Systems, Inc.

>>quts_hero>>h5.2.0.2802

cpe:2.3:o:qnap:quts_hero:h5.2.0.2802:build_20240620:*:*:*:*:*:*

QNAP Systems, Inc.

>>quts_hero>>h5.2.0.2823

cpe:2.3:o:qnap:quts_hero:h5.2.0.2823:build_20240711:*:*:*:*:*:*

QNAP Systems, Inc.

>>quts_hero>>h5.2.0.2851

cpe:2.3:o:qnap:quts_hero:h5.2.0.2851:build_20240808:*:*:*:*:*:*

QNAP Systems, Inc.

>>quts_hero>>h5.2.0.2860

cpe:2.3:o:qnap:quts_hero:h5.2.0.2860:build_20240817:*:*:*:*:*:*

QNAP Systems, Inc.

>>quts_hero>>h5.2.1.2929

cpe:2.3:o:qnap:quts_hero:h5.2.1.2929:build_20241025:*:*:*:*:*:*

QNAP Systems, Inc.

>>quts_hero>>h5.2.1.2940

cpe:2.3:o:qnap:quts_hero:h5.2.1.2940:build_20241105:*:*:*:*:*:*

QNAP Systems, Inc.

>>quts_hero>>h5.2.2.2952

cpe:2.3:o:qnap:quts_hero:h5.2.2.2952:build_20241116:*:*:*:*:*:*

QNAP Systems, Inc.

>>quts_hero>>h5.2.3.3006

cpe:2.3:o:qnap:quts_hero:h5.2.3.3006:build_20250108:*:*:*:*:*:*

QNAP Systems, Inc.

>>quts_hero>>h5.2.4.3070

cpe:2.3:o:qnap:quts_hero:h5.2.4.3070:build_20250312:*:*:*:*:*:*

QNAP Systems, Inc.

>>quts_hero>>h5.2.4.3079

cpe:2.3:o:qnap:quts_hero:h5.2.4.3079:build_20250321:*:*:*:*:*:*

QNAP Systems, Inc.

>>quts_hero>>h5.2.5.3138

cpe:2.3:o:qnap:quts_hero:h5.2.5.3138:build_20250519:*:*:*:*:*:*

QNAP Systems, Inc.

>>quts_hero>>h5.2.6.3195

cpe:2.3:o:qnap:quts_hero:h5.2.6.3195:build_20250715:*:*:*:*:*:*

QNAP Systems, Inc.

>>quts_hero>>h5.2.7.3256

cpe:2.3:o:qnap:quts_hero:h5.2.7.3256:build_20250913:*:*:*:*:*:*

QNAP Systems, Inc.

>>quts_hero>>h5.2.7.3297

cpe:2.3:o:qnap:quts_hero:h5.2.7.3297:build_20251024:*:*:*:*:*:*

QNAP Systems, Inc.

>>quts_hero>>h5.2.8.3321

cpe:2.3:o:qnap:quts_hero:h5.2.8.3321:build_20251117:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-59	Primary	security@qnapsecurity.com.tw

CWE ID: CWE-59

Type: Primary

Source: security@qnapsecurity.com.tw

References

Hyperlink	Source	Resource
https://www.qnap.com/en/security-advisory/qsa-26-05	security@qnapsecurity.com.tw	Vendor Advisory

Hyperlink: https://www.qnap.com/en/security-advisory/qsa-26-05

Source: security@qnapsecurity.com.tw

Resource:

Vendor Advisory