QNAP QTS: CVE-2025-9110: Multiple Vulnerabilities in QTS and QuTS hero

Multiple vulnerabilities have been reported to affect several QNAP operating system versions: CVE-2025-9110: Exposure of sensitive system information to an unauthorized control sphere vulnerability If exploited, remote attackers can read application data. CVE-2025-48721, CVE-2025-62852: Buffer overflow vulnerabilities If a remote attacker gains access to an administrator account, they can then exploit the vulnerabilities to modify memory or crash processes. CVE-2025-59380, CVE-2025-59381: Path traversal vulnerabilities If a remote attacker gains access to an administrator account, they can then exploit the vulnerabilities to read the contents of unexpected files or system data. We have already fixed the vulnerabilities in the following versions: