8.1 HighCWE-94
CVE-2025-11837
Malware Remover
QNAP Systems Inc.Malware Remover
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 24 Oct
1.5%probability of exploitation in the next 30 days
Higher than 74% of scored CVEs
SeverityCVSS
8.1High
Description NVD
An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection mechanism. We have already fixed the vulnerability in the following version: Malware Remover 6.6.8.20251023 and later
Coverage 1 article · 1 outlet
- QNAP fixed four vulnerabilities demonstrated at Pwn2Own Ireland 2025Security Affairs · first in our coverage · mentions it in passing