QNAP withdraws QTS 5.2.2 update after reports of connectivity failures, app crashes, and login issues. Learn how to resolve these critical problems...
Continue reading
QNAP has retracted its recently released firmware update, QTS 5.2.2.2950 build 20241114, after multiple reports from users indicated severe disruptions in device functionality. The update, launched on November 14, 2024, was intended to address several security vulnerabilities and resolve known issues across a wide range of QNAP network-attached storage (NAS) models. However, post-installation, it has been linked to critical connectivity failures and, in some cases, has left users unable to access their devices entirely.
Users who applied the update reported a variety of technical malfunctions, including:
A frustrated user reported their experiences on the QNAP community forum: _“I can no longer connect to my files through the same network. Accessing via a browser leaves me stuck on the login page. Through myQNAPcloud, I can connect, but nothing opens. Restarting and multiple connection methods didn’t resolve the issue.”_
Another customer shared on Reddit, _“After updating to the latest QTS version, my SMB shared drives completely broke. I had to downgrade to the previous version to restore functionality.”_
As of now, QNAP has not issued an official public advisory addressing the widespread issues. However, its support team has confirmed the removal of the problematic firmware from the download pages of impacted NAS models.
In response to affected users, QNAP has recommended rolling back to an earlier firmware version, QTS 5.2.1.2930 build 2024102, which is stable and reportedly resolves the identified issues.
According to QNAP's support team, _“We do have a problem with this 5.2.2 update on some NAS devices related to the DOM secondary partition. The official R&D recommendation is to downgrade the firmware via Qfinder Pro to 5.2.1.”_
To mitigate the issues, QNAP suggests the following course of action:
The incident highlights the critical importance of rigorous pre-release testing for firmware updates, especially when deployed across a broad user base of enterprise and personal NAS users. It underscores the need for transparent and proactive communication from vendors when software updates introduce system-breaking issues.
1️⃣ Regularly back up device settings and configurations before applying updates.
2️⃣ Maintain access to older, stable firmware versions to facilitate quick rollbacks if necessary.
3️⃣ Monitor user forums and official advisories for early indications of post-update issues.
While QNAP’s quick removal of the flawed update mitigates further spread of these issues, the lack of an immediate public advisory leaves many users without clarity. Moving forward, QNAP must prioritize rebuilding user trust by addressing these challenges transparently and implementing more robust quality assurance processes.
Splunk disclosed CVE-2026-20253, a critical pre-auth RCE flaw in Splunk Enterprise (CVSS 9.8) from insecure MongoDB defaults. Patches released; upgrade to 9.1.8, 9.2.5, or 9.3.2.
