CVE-2025-59389

✓ Confirmed 0-Day
Triaged: March 5, 2026 1 article
VulnLookup ↗ NVD ↗ MITRE ↗

EPSS Score

Source: FIRST.org · 2026-05-24
0.13%
probability
This CVE has a 0.13% probability of being exploited in the next 30 days.
0% Top 32.1th percentile of all CVEs 100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Signal Intelligence

Confidenceⓘ
85%
EPSS 0.13%
Mentions 1
Last Seen Nov 07, 2025

CNA Information

Analyst Note

CVE-2025-59389 is explicitly listed among QNAP's seven NAS zero-day flaws exploited at Pwn2Own, a live hacking competition where vulnerabilities are discovered and exploited in real-time before patches exist. The CVE was patched in version 2.2.4.1, with exploitation occurring at Pwn2Own (January 2025 timeframe), confirming pre-patch exploitation.

Threat Actors 2

Hacking Team
apt_group 🇮🇹 IT
Mana Team
apt_group 🇨🇳 CN

Triage Info

Decided atMar 05, 2026