CVE-2025-59382 - Vulnerability Details - OpenCVE

QTS, QuTS hero, QuTScloud are not affected. We have already fixed the vulnerability in the following version:

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction Active

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Qnap Systems	Qts Quts Hero Qutscloud

No data.

No data.

References

Link	Providers
https://www.qnap.com/en/security-advisory/qsa-26-10

History

Wed, 10 Jun 2026 17:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 10 Jun 2026 11:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Qnap Systems Qnap Systems qts Qnap Systems quts Hero Qnap Systems qutscloud
Vendors & Products		Qnap Systems Qnap Systems qts Qnap Systems quts Hero Qnap Systems qutscloud

Wed, 10 Jun 2026 02:30:00 +0000

Type	Values Removed	Values Added
Description		QTS, QuTS hero, QuTScloud are not affected. We have already fixed the vulnerability in the following version:
Title		QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)
Weaknesses		CWE-472
References		https://www.qnap.com/en/security-advisory/qsa-26-10
Metrics		cvssV4_0 `{'score': 5.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N'}`

MITRE

Status: PUBLISHED

Assigner: qnap

Published: 2026-06-10T01:38:20.686Z

Updated: 2026-06-10T16:04:08.349Z

Reserved: 2025-09-15T08:35:00.660Z

Link: CVE-2025-59382

Vulnrichment

Updated: 2026-06-10T16:03:55.640Z

NVD

Status : Received

Published: 2026-06-10T03:16:24.527

Modified: 2026-06-10T03:16:24.527

Link: CVE-2025-59382

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-59382", "assignerOrgId": "2fd009eb-170a-4625-932b-17a53af1051f", "state": "PUBLISHED", "assignerShortName": "qnap", "dateReserved": "2025-09-15T08:35:00.660Z", "datePublished": "2026-06-10T01:38:20.686Z", "dateUpdated": "2026-06-10T16:04:08.349Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "QTS", "vendor": "QNAP Systems Inc.", "versions": [{"status": "unaffected", "version": "?"}]}, {"defaultStatus": "unaffected", "product": "QuTS hero", "vendor": "QNAP Systems Inc.", "versions": [{"status": "unaffected", "version": "?"}]}, {"defaultStatus": "unaffected", "product": "QuTScloud", "vendor": "QNAP Systems Inc.", "versions": [{"status": "unaffected", "version": "c5.0.0"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Tim Coen"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<br>QTS, QuTS hero, QuTScloud are not affected.<br><br>We have already fixed the vulnerability in the following version:<br>"}], "value": "QTS, QuTS hero, QuTScloud are not affected.\n\nWe have already fixed the vulnerability in the following version:"}], "impacts": [{"capecId": "CAPEC-98", "descriptions": [{"lang": "en", "value": "CAPEC-98"}]}], "metrics": [{"cvssV4_0": {"attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 5.1, "baseSeverity": "MEDIUM", "exploitMaturity": "UNREPORTED", "privilegesRequired": "NONE", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "ACTIVE", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-472", "description": "CWE-472", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "2fd009eb-170a-4625-932b-17a53af1051f", "shortName": "qnap", "dateUpdated": "2026-06-10T01:38:20.686Z"}, "references": [{"url": "https://www.qnap.com/en/security-advisory/qsa-26-10"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "We have already fixed the vulnerability in the following version:<br>"}], "value": "We have already fixed the vulnerability in the following version:"}], "source": {"advisory": "QSA-26-10", "discovery": "EXTERNAL"}, "title": "QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-10T16:03:46.175446Z", "id": "CVE-2025-59382", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-10T16:04:08.349Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-59382", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-10T16:03:46.175446Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-10T16:03:55.640Z"}}], "cna": {"title": "QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)", "source": {"advisory": "QSA-26-10", "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Tim Coen"}], "impacts": [{"capecId": "CAPEC-98", "descriptions": [{"lang": "en", "value": "CAPEC-98"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 5.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", "exploitMaturity": "UNREPORTED", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "QNAP Systems Inc.", "product": "QTS", "versions": [{"status": "unaffected", "version": "?"}], "defaultStatus": "unaffected"}, {"vendor": "QNAP Systems Inc.", "product": "QuTS hero", "versions": [{"status": "unaffected", "version": "?"}], "defaultStatus": "unaffected"}, {"vendor": "QNAP Systems Inc.", "product": "QuTScloud", "versions": [{"status": "unaffected", "version": "c5.0.0"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "We have already fixed the vulnerability in the following version:", "supportingMedia": [{"type": "text/html", "value": "We have already fixed the vulnerability in the following version:<br>", "base64": false}]}], "references": [{"url": "https://www.qnap.com/en/security-advisory/qsa-26-10"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "QTS, QuTS hero, QuTScloud are not affected.\n\nWe have already fixed the vulnerability in the following version:", "supportingMedia": [{"type": "text/html", "value": "<br>QTS, QuTS hero, QuTScloud are not affected.<br><br>We have already fixed the vulnerability in the following version:<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-472", "description": "CWE-472"}]}], "providerMetadata": {"orgId": "2fd009eb-170a-4625-932b-17a53af1051f", "shortName": "qnap", "dateUpdated": "2026-06-10T01:38:20.686Z"}}}, "cveMetadata": {"cveId": "CVE-2025-59382", "state": "PUBLISHED", "dateUpdated": "2026-06-10T16:04:08.349Z", "dateReserved": "2025-09-15T08:35:00.660Z", "assignerOrgId": "2fd009eb-170a-4625-932b-17a53af1051f", "datePublished": "2026-06-10T01:38:20.686Z", "assignerShortName": "qnap"}, "dataVersion": "5.2"}