An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource.
We have already fixed the vulnerability in the following versions:
QTS 5.2.6.3195 build 20250715 and later
QuTS hero h5.2.6.3195 build 20250715 and later
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Qnap Systems Inc. |
|
No data.
No data.
No data.
References
| Link | Providers |
|---|---|
| https://www.qnap.com/en/security-advisory/qsa-25-50 |
|
History
Fri, 02 Jan 2026 15:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following versions: QTS 5.2.6.3195 build 20250715 and later QuTS hero h5.2.6.3195 build 20250715 and later | |
| Title | QTS, QuTS hero | |
| First Time appeared |
Qnap Systems Inc.
Qnap Systems Inc. qts Qnap Systems Inc. quts Hero |
|
| Weaknesses | CWE-770 | |
| CPEs | cpe:2.3:a:qnap_systems_inc.:qts:*:*:*:*:*:*:*:* cpe:2.3:a:qnap_systems_inc.:quts_hero:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Qnap Systems Inc.
Qnap Systems Inc. qts Qnap Systems Inc. quts Hero |
|
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: qnap
Published:
Updated: 2026-01-02T14:52:49.669Z
Reserved: 2025-05-02T05:58:18.475Z
Link: CVE-2025-47208
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-01-02T15:16:00.017
Modified: 2026-01-02T15:16:00.017
Link: CVE-2025-47208
Redhat
No data.
OpenCVE Enrichment
No data.