CVE-2025-11837: high-severity vulnerability in QNAP Systems Inc. Malware Remover
Malware Remover
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
43Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Actcvss 8.1epss 1.5%
from disclosure to weapon
Published on NVDJan 2
VulnCheck+166d
An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection mechanism.
We have already fixed the vulnerability in the following version:
Malware Remover 6.6.8.20251023 and later
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
Affected products
QNAP Systems Inc. · Malware RemoverRelated CVEs — QNAP Systems Inc. Malware Remover
In the same product, most dangerous first.