CVE-2025-11837 is a code injection vulnerability in QNAP's Malware Remover application, demonstrated at Pwn2Own Ireland 2025. Patched in November 2025, it is exploited by a second strain of AryStinger malware targeting QNAP NAS devices.
CVE-2025-11837 is a code injection vulnerability in QNAP's Malware Remover application, demonstrated at Pwn2Own Ireland 2025. Patched in November 2025, it is exploited by a second strain of AryStinger malware targeting QNAP NAS devices.