CVE-2025-59382: CWE-472 in QNAP Systems Inc. QTS
A low-severity vulnerability identified as CVE-2025-59382 affects QNAP Systems Inc.'s QTS product. The vulnerability is classified under CWE-472. QTS versions prior to the fix are affected, while QuTS hero and QuTScloud are not impacted. A fix has been implemented in a version not explicitly stated in the provided data.
AI Analysis
Technical Summary
CVE-2025-59382 is a vulnerability in QNAP Systems Inc.'s QTS product related to CWE-472 (External Control of Assumed-Immutable Web Parameter). The vulnerability does not affect QuTS hero or QuTScloud products. Although the exact affected versions are not specified, the vendor has indicated that the issue has been fixed in a subsequent release. The CVSS 4.0 base score is 1.2, indicating low severity, with network attack vector, low impact on integrity, and no privileges required for exploitation but requiring user interaction.
Potential Impact
The vulnerability has a low impact as indicated by the CVSS score of 1.2. It involves external control of an assumed immutable web parameter, which could potentially lead to limited integrity issues. There are no known exploits in the wild, and the vulnerability does not affect cloud services or other QNAP products such as QuTS hero or QuTScloud.
Mitigation Recommendations
The vendor has fixed the vulnerability in a version of QTS not explicitly detailed in the provided data. Users should update to the latest QTS version where the fix is applied. Patch status is not yet confirmed in detail—check the vendor advisory for current remediation guidance.
CVE-2025-59382: CWE-472 in QNAP Systems Inc. QTS
Description
A low-severity vulnerability identified as CVE-2025-59382 affects QNAP Systems Inc.'s QTS product. The vulnerability is classified under CWE-472. QTS versions prior to the fix are affected, while QuTS hero and QuTScloud are not impacted. A fix has been implemented in a version not explicitly stated in the provided data.
CVSS v4.0
Score 1.2low
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-59382 is a vulnerability in QNAP Systems Inc.'s QTS product related to CWE-472 (External Control of Assumed-Immutable Web Parameter). The vulnerability does not affect QuTS hero or QuTScloud products. Although the exact affected versions are not specified, the vendor has indicated that the issue has been fixed in a subsequent release. The CVSS 4.0 base score is 1.2, indicating low severity, with network attack vector, low impact on integrity, and no privileges required for exploitation but requiring user interaction.
Potential Impact
The vulnerability has a low impact as indicated by the CVSS score of 1.2. It involves external control of an assumed immutable web parameter, which could potentially lead to limited integrity issues. There are no known exploits in the wild, and the vulnerability does not affect cloud services or other QNAP products such as QuTS hero or QuTScloud.
Mitigation Recommendations
The vendor has fixed the vulnerability in a version of QTS not explicitly detailed in the provided data. Users should update to the latest QTS version where the fix is applied. Patch status is not yet confirmed in detail—check the vendor advisory for current remediation guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- qnap
- Date Reserved
- 2025-09-15T08:35:00.660Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a28cb288dd33fbd85cc5d2b
Added to database: 06/10/2026, 02:25:44 UTC
Last enriched: 07/08/2026, 13:41:54 UTC
Last updated: 07/31/2026, 19:22:56 UTC
Views: 79
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.