CVE-2025-59385

CRITICAL

An authentication bypass by spoofing vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to access resources wh...

Affects 2 products across 1 vendor.

BCS7.24
CVSS 3.19.8
CVSS v48.1
EPSS0.7%
Percentile48th
PatchPatched
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-290: CWE-290
Related Attack Patterns (CAPEC)
CAPEC-59 Session Credential Falsification through Prediction
via CWE-290
CAPEC-60 Reusing Session IDs (aka Session Replay)
via CWE-290
CAPEC-459 Creating a Rogue Certification Authority Certificate
via CWE-290
CAPEC-476 Signature Spoofing by Misrepresentation
via CWE-290
CAPEC-667 Bluetooth Impersonation AttackS (BIAS)
via CWE-290
Show all 10

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ SAGE Intelligence — CITED Relevance Research Team

An authentication bypass by spoofing vulnerability affects several QNAP operating system versions, allowing remote attackers to access unauthorized resources.

BSID: BS-2025-GLOBAL-032998-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2025-59385?
An authentication bypass by spoofing vulnerability affects several QNAP operating system versions, allowing remote attackers to access unauthorized resources.
What is the CVSS score for CVE-2025-59385?
CVE-2025-59385 has CVSS 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS: 0.7%.
Is CVE-2025-59385 actively exploited?
No confirmed active exploitation of CVE-2025-59385 as of 2026-05-30.
How do I remediate CVE-2025-59385?
Priority: IMMEDIATE. Advisory: https://www.qnap.com/en/security-advisory/qsa-25-45 PSIRT: [email protected]
What systems are affected by CVE-2025-59385?
CVE-2025-59385 affects: Qnap, Qnap.
Vulnerability Details
CVE IDCVE-2025-59385
BSIDBS-2025-GLOBAL-032998-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2025-12-16
Last Modified2025-12-17
ICS Relevance55%
Weakness (CWE)
CWE-290
SourceNVD
Official Description

An authentication bypass by spoofing vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to access resources which are not otherwise accessible without proper authentication. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3297 build 20251024 and later QuTS hero h5.2.7.3297 build 20251024 and later QuTS hero h5.3.1.3292 build 20251024 and later

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Remote attackers can exploit the vulnerability by spoofing authentication, leading to unauthorized access to system resources.

Exploitation Likelihood: CRITICAL

Affected Products
VendorProductFixed Version
Qnap Qts —
Qnap Quts Hero —
Remediation
View Vendor Advisory →

Remediation Priority: IMMEDIATE

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: August 2026 | Threat Age: 237 Days
CISA KEVNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
SAGE Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hash778b52efc5ecd57a5699137dca37cc3719d1703b82a1957c14b56104b1cc19ea4644b33d93e5947985b4f540793506c78ad4458fdb13ac3d31f9a0d643e1c755
Related CVEs affecting Qnap
CVE-2017-7876 10.0 This command injection vulnerability in QTS allows attackers to run arbitrary... CVE-2024-32766 10.0 An OS command injection vulnerability has been reported to affect several QNA... CVE-2024-32764 9.9 A missing authentication for critical function vulnerability has been reporte... CVE-2024-48862 9.8 A link following vulnerability has been reported to affect QuLog Center. If e... CVE-2024-48863 9.8 A command injection vulnerability has been reported to affect License Center....
View all Qnap CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Check Your Assets Free →