CVE-2025-62848

✓ Confirmed 0-Day

Triaged: March 5, 2026 1 article

VulnLookup ↗ NVD ↗ MITRE ↗

EPSS Score

Source: FIRST.org · 2026-05-24

0.15%

probability

This CVE has a 0.15% probability of being exploited in the next 30 days.

0% Top 35.1th percentile of all CVEs 100%

CVSS score unavailable

Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Attack Intelligence

CWE-476 · NULL Pointer Dereference CWE-703 · Improper Check or Handling of Exceptional Conditions CWE-710 · Improper Adherence to Coding Standards CWE-754 · Improper Check for Unusual or Exceptional Conditions

QNAP fixes seven NAS zero-day flaws exploited at Pwn2Own

BleepingComputer Nov 07, 2025

Signal Intelligence

Confidenceⓘ

85%

EPSS 0.15%

Mentions 1

Last Seen Nov 07, 2025

CNA Information

Analyst Note

CVE-2025-62848 is explicitly named as one of seven zero-day flaws exploited at Pwn2Own in the BleepingComputer article. QNAP published patches (build 20251024) on or very near the CVE publication date (2025-12-16), indicating exploitation preceded or coincided with patch availability, meeting zero-day criteria.

Threat Actors 2

Hacking Team

apt_group 🇮🇹 IT

Mana Team

apt_group 🇨🇳 CN

Triage Info

Decided atMar 05, 2026