A vulnerability marked as critical has been reported in QNAP QTS and QuTS hero. Impacted is an unknown function. Performing manipulation results in os command injection.

This vulnerability is known as CVE-2025-47212. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.