An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection mechanism.
We have already fixed the vulnerability in the following version:
Malware Remover 6.6.8.20251023 and later
We have already fixed the vulnerability in the following version:
Malware Remover 6.6.8.20251023 and later
Metrics
Affected Vendors & Products
Advisories
No advisories yet.
Fixes
Solution
We have already fixed the vulnerability in the following version: Malware Remover 6.6.8.20251023 and later
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://www.qnap.com/en/security-advisory/qsa-25-47 |
|
History
Fri, 02 Jan 2026 16:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection mechanism. We have already fixed the vulnerability in the following version: Malware Remover 6.6.8.20251023 and later | |
| Title | Malware Remover | |
| First Time appeared |
Qnap Systems Inc.
Qnap Systems Inc. malware Remover |
|
| Weaknesses | CWE-94 | |
| CPEs | cpe:2.3:a:qnap_systems_inc.:malware_remover:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Qnap Systems Inc.
Qnap Systems Inc. malware Remover |
|
| References |
| |
| Metrics |
cvssV4_0
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: qnap
Published:
Updated: 2026-01-02T15:51:28.839Z
Reserved: 2025-10-16T05:24:28.428Z
Link: CVE-2025-11837
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-01-02T16:15:48.403
Modified: 2026-01-02T16:45:26.640
Link: CVE-2025-11837
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses