QNAP TS-453E conn_log_tool Format String Remote Code Execution Vulnerability

A network-adjacent attacker can execute arbitrary code on QNAP TS-453E NAS devices (CVE-2025-62848) by bypassing the authentication mechanism, despite authentication being required under normal circumstances. This vulnerability poses a moderate risk with a CVSS score of 5.5, allowing attackers with network access to gain code execution capabilities on affected systems. Security teams should prioritize patching QNAP TS-453E devices and implement network segmentation to restrict access to these devices from untrusted network segments until updates are available.