This vulnerability (CVE-2025-11837) in QNAP Malware Remover is classified as CWE-94, indicating improper control of code generation. It allows remote attackers to bypass the product's protection mechanisms without authentication or user interaction, posing a significant security risk. The CVSS 4.0 base score is 8.1 (high), reflecting network attack vector, low complexity, no privileges required, and high impact on confidentiality, integrity, and availability. The vendor has released an official fix in version 6.6.8.20251023 and later.

Successful exploitation could allow remote attackers to bypass Malware Remover's protection mechanisms, potentially leading to unauthorized code execution or evasion of malware detection. This impacts the confidentiality, integrity, and availability of the affected system. No known exploits have been reported in the wild so far.

Upgrade Malware Remover to version 6.6.8.20251023 or later to apply the official fix provided by QNAP Systems Inc. No additional mitigation steps are indicated by the vendor advisory.