vciy

QNAP Systems Inc. QuTS hero: 20 records in one advisory

20 records announced together, published 2025-10-03, every one of them citing the same advisory.

The advisory

Every record in this batch cites https://www.qnap.com/en/security-advisory/qsa-25-36. That is the CNA's own reference, held in the index, and it is why these records are on one page.

What the records offer

All 20 records publish a fixed version.

No record in this batch is listed by CISA in held sources.

Held sources describe every record in this batch identically. Nothing but the identifier and the publication time separates one from another here.

Most commonly mapped weakness across the batch: CWE-476.

What this page does not cover

This batch is 20 of the 26 records that cite the same advisory. The other 6 are different findings announced alongside it.

None of those 6 is grouped with any other. Each one has its own record page and nothing else.

The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

CVE-2025-47213QTS, QuTS heroCWE-476
CVE-2025-47214QTSCWE-476
CVE-2025-48726QTS, QuTS heroCWE-476
CVE-2025-48727QTS, QuTS heroCWE-476
CVE-2025-48728QTS, QuTS heroCWE-476
CVE-2025-48729QTS, QuTS heroCWE-476
CVE-2025-52424QTS, QuTS heroCWE-476
CVE-2025-52427QTS, QuTS heroCWE-476
CVE-2025-52428QTSCWE-476
CVE-2025-52432QTS, QuTS heroCWE-476
CVE-2025-52433QTS, QuTS heroCWE-476
CVE-2025-52853QTS, QuTS heroCWE-476
CVE-2025-52854QTS, QuTS heroCWE-476
CVE-2025-52855QTS, QuTS heroCWE-476
CVE-2025-52857QTS, QuTS heroCWE-476
CVE-2025-52858QTS, QuTS heroCWE-476
CVE-2025-52859QTS, QuTS heroCWE-476
CVE-2025-52860QTS, QuTS heroCWE-476
CVE-2025-52862QTS, QuTS heroCWE-476
CVE-2025-52866QTS, QuTS heroCWE-476

20 records, read from the index as it stood on 2026-09-20. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.