CVE-2026-26241

CVE-2026-26241 affects File Station 5; a buffered overflow in a component of File Station 5. Exploitation could crash or modify memory, with impact described as high on integrity and availability (per CVSS data). A fix is available in File Station 5 5.5.6.5243 and later. Public details across con...

CVE-2026-24724

CVE-2026-24724 affects File Station 6. The issue is an incorrect authorization that allows a remote attacker who already has a user account to bypass access restrictions. According to the metrics, this is a NETWORK-exposed vulnerability with LOW privileges required and NO user interaction, yieldi...

CVE-2025-22486

CVE-2025-22486 involves an improper certificate validation vulnerability in QNAP File Station 5 . The issue arises from trust management/certificate validation flaws, affecting versions prior to 5.5.6.4791 . Successful exploitation could allow remote attackers who already have user access to comp...

CVE-2026-22899

The CVE-2026-22899 entry describes a NULL pointer dereference in File Station 6 that can be triggered remotely by an authenticated user to cause a DoS. Affected software: File Station 6 (specific versions affected not explicitly listed beyond the fixed release). Underlying cause: NULL pointer der...

CVE-2025-29883

CVE-2025-29883 affects QNAP File Station 5 . A vulnerability with improper certificate validation could allow remote attackers who have gained user access to compromise the system. Affected versions are prior to 5.5.6.4791; remediation is to upgrade to 5.5.6.4791 or later (as fixed in the referen...

CVE-2026-24720

The CVE-2026-24720 entry concerns File Station 6 with a resource-allocation vulnerability (no throttling). A user-account–enabled remote attacker can cause resource denial for other systems/applications. The issue is fixed in File Station 5 5.5.6.5243 and later; upgrading to that version or later...

CVE-2025-29884

The CVE-2025-29884 issue affects QNAP File Station 5. The root cause is improper certificate validation in File Station 5, which could allow remote attackers who have user access to compromise system security. Affected versions are File Station 5 prior to 5.5.6.4791; remediation is to update to 5...

CVE-2024-48864

The CVE-2024-48864 entry affects QNAP File Station 5. Prior to version 5.5.6.4741, a file or directory became externally accessible, enabling remote read/write of files/directories. The vulnerability is resolved in File Station 5, version 5.5.6.4741 and later. Public references show CVSS metrics ...

CVE-2025-30279

CVE-2025-30279 affects QNAP/File Station 5. An improper certificate validation vulnerability can allow a remote attacker who has a user account to compromise the system. The issue is fixed in File Station 5, version 5.5.6.4847 and later. Public risk details (exploit status, scope, or vectors) not...

CVE-2025-22490

CVE-2025-22490 affects QNAP File Station 5. Affected component: File Station 5 (versions prior to 5.5.6.4847). Root cause: NULL pointer dereference. Consequence: remote attacker who has a user account can trigger a denial-of-service (DoS) condition. Mitigation: update to File Station 5 5.5.6.4847...

CVE-2025-33031

CVE-2025-33031 : Affected product is QNAP File Station 5. Versions prior to 5.5.6.4847 are vulnerable to an improper certificate validation issue. Exploitation requires the attacker to have a valid user account and remote access, potentially compromising system security. The issue is fixed in Fil...

CVE-2025-29871

CVE-2025-29871 affects QNAP File Station 5. The vulnerability is an out-of-bounds read that can lead to data leakage when an attacker already has an administrator account on the local system. A fix is available in File Station 5 version 5.5.6.4847 and later. Practical impact is limited to local a...

CVE-2025-29873

CVE-2025-29873 affects QNAP’s File Station 5. The vulnerability is a NULL pointer dereference that a remote attacker who has a user account can trigger to cause a DoS condition. The issue impacts File Station 5 versions prior to 5.5.6.4847, with an official fix in 5.5.6.4847 and later. The availa...

CVE-2025-29876

File Station 5 is affected by a NULL pointer dereference (remote DoS) in versions prior to 5.5.6.4847. The issue can be triggered by a user account; upgrading to File Station 5 5.5.6.4847 and later resolves the vulnerability. The connected PT-2025-24300 entry confirms affected versions and the re...

CVE-2025-29885

CVE-2025-29885 refers to an improper certificate validation vulnerability affecting QNAP File Station 5 . The issue allows remote attackers who already have user access to potentially compromise system security. Technical details in the connected PT-2025-24304 entry specify affected versions: Fil...

CVE-2025-29872

The CVE-2025-29872 vulnerability affects QNAP File Station 5, describing an allocation of resources without limits or throttling that can lead to resource exhaustion. A remote attacker with a user account can exploit this issue to prevent other systems, applications, or processes from accessing t...

CVE-2025-29877

CVE-2025-29877 affects QNAP File Station 5. The issue is a NULL pointer dereference in File Station 5 (remote user with an account can trigger a DoS). A fix is available in File Station 5 version 5.5.6.4847 and later. Multiple sources (NVD, Red Hat, CNVD, CVE lists) describe the vulnerability as ...

CVE-2025-33035

CVE-2025-33035 concerns a path traversal vulnerability in QNAP File Station 5 . The issue allows a remote attacker who has a user account to read unexpected files or system data. Affected version range is File Station 5 prior to 5.5.6.4847 ; the vulnerability is mitigated by upgrading to 5.5.6.48...

CVE-2026-26240

CVE-2026-26240 is a bufferoverflow in File Station 5. The vulnerability could allow a remote attacker to modify memory or crash processes. Public metrics show a high impact on integrity and availability with network attack vector and no user interaction required. The issue has been addressed in F...

CVE-2026-26239

CVE-2026-26239 affects QNAP File Station 5. A buffer overflow vulnerability could be triggered when a remote attacker who has a user account gains access to the system, allowing memory modification or process crashes. The issue has been fixed in File Station 5 version 5.5.6.5208 and later. The pu...

CVE-2025-47206

Summary: CVE-2025-47206 affects QNAP File Station 5. The vulnerability is an out-of-bounds write that could allow memory corruption when a remote attacker gains a user account. Affected software/versions: File Station 5 (prior to 5.5.6.4933). Impact: memory corruption; high severity indicators in...

CVE-2025-29886

CVE-2025-29886 affects QNAP File Station 5. The vulnerability is a NULL pointer dereference that can be exploited by a remote attacker who has a user account to cause a denial-of-service. The issue is mitigated by updating to File Station 5 5.5.6.4907 or later. Multiple connected sources corrobor...

CVE-2025-53413

CVE-2025-53413 concerns QNAP File Station 5. The vulnerability is described as an unlimited resource allocation/throttling issue that, if exploitable by an attacker with a user account, can lead to denial of service by preventing other systems, applications, or processes from accessing the same t...

CVE-2025-57707

CVE-2025-57707 affects QNAP File Station 5. The vulnerability is described as an improper neutralization of directives in statically saved code (Static Code Injection) that could allow a remote attacker with a user account to access restricted data/files. The Red Hat, NVD, OSV, and related source...

CVE-2025-57713

CVE-2025-57713 concerns QNAP File Station 5. The weakness is a weak authentication mechanism that could allow remote attackers to obtain sensitive information. Disclosed across multiple sources, with a fix released in File Station 5 5.5.6.5166 and later; affected versions prior to this may be vul...

CVE-2025-29879

CVE-2025-29879 — File Station 5 vulnerability details from connected sources confirm a NULL pointer dereference affecting File Station 5. An attacker who gains a user account can trigger a denial-of-service. Likely impact is availability degradation, with no reported impact to confidentiality or ...

CVE-2025-29889

CVE-2025-29889 affects QNAP/File Station 5, where a NULL pointer dereference vulnerability can be exploited by a remote attacker who has a user account to cause a denial-of-service (DoS). The issue is tied to File Station 5 and is mitigated by upgrading to File Station 5, version 5.5.6.4907 or la...

CVE-2025-29875

CVE-2025-29875 affects QNAP File Station 5. A NULL pointer dereference vulnerability can be triggered by a remote attacker who has a user account, potentially causing a denial-of-service. The issue is mitigated by upgrading to File Station 5 version 5.5.6.4907 or later, as reported across multipl...

CVE-2025-29890

CVE-2025-29890 affects QNAP File Station 5. An allocation of resources without limits or throttling vulnerability exists; with a user account, an attacker could exploit it to prevent other systems/applications/processes from accessing the same resources. Technical details across connected sources...

CVE-2025-29899

CVE-2025-29899 affects QNAP File Station 5. An allocation of resources without limits or throttling exists in File Station 5 prior to 5.5.6.4907, enabling an authenticated remote attacker with a user account to exhaust resources and cause denial of service to other systems, applications, or proce...

CVE-2025-62853

A path traversal vulnerability in File Station 5 allows an attacker with a user account to read contents of files and system data. Affected: File Station 5; root cause: path traversal. Impact (per metrics): confidentiality LOW, integrity HIGH, availability HIGH; exploitation requires network acce...

CVE-2025-62856

CVE-2025-62856 affects QNAP File Station 5. A path traversal vulnerability exists in File Station 5 that could allow an administrator to read unexpected files or system data. Root cause: path traversal exposure likely in file read logic; impact is confidentiality (read access) with LOW vulnerable...

CVE-2025-29901

CVE-2025-29901 affects QNAP File Station 5. A NULL pointer dereference vulnerability could allow a remote attacker who has a user account to cause a denial-of-service on affected systems. The issue is rooted in File Station 5 (versions prior to 5.5.6.4933). A fixed release is available: File Stat...

CVE-2025-62854

File Station 5 vulnerability CVE-2025-62854 is an uncontrolled resource consumption issue that can be exploited to cause a DoS when an attacker with a valid user account is present. Affected software: File Station 5. The issue arises within the service when resource consumption is not properly co...

CVE-2025-29874

CVE-2025-29874 describes a NULL pointer dereference in QNAP File Station 5 . The vulnerability can be triggered by a remote attacker who already has a user account , potentially causing a Denial of Service on affected NAS devices. Root cause: NULL pointer dereference in File Station 5. Affected p...

CVE-2025-29900

CVE-2025-29900 affects QNAP File Station 5. The vulnerability is an unconstrained resource allocation (no limits/throttling) that can be exploited by an on‑net attacker who has a user account to cause a denial of service, impacting availability of resources for other systems or processes. Public ...

CVE-2025-53411

CVE-2025-53411 affects QNAP File Station 5. The issue is an unlimited/unthrottled resource allocation vulnerability that can be exploited by an attacker who has administrator privileges to disrupt access to resources, preventing other systems/applications/processes from using the same resources. ...

CVE-2025-54161

Technical details about CVE-2025-54161 are not publicly provided in the supplied documents; monitor for updates.

CVE-2025-66278

CVE-2025-66278 : A path traversal vulnerability affects File Station 5. If an attacker gains a user account, they can read contents of unexpected files or system data. The issue is fixed in File Station 5 version 5.5.6.5190 and later. The accompanying metrics indicate a CVSS v4.0 base score of 5....

CVE-2026-22894

CVE-2026-22894 describes a path traversal vulnerability in File Station 6. If an attacker can obtain a user account, they can read contents of unexpected files or system data. The issue is mitigated in newer builds; a fix is available in File Station 5 5.5.6.5190 and later. The provided metrics i...

CVE-2025-29878

The CVE-2025-29878 affects QNAP File Station 5. A NULL pointer dereference vulnerability exists that can be triggered by a remote attacker who has a user account, enabling a DoS attack. A fix is available in File Station 5 version 5.5.6.4907 and later. Technical details across connected sources c...

CVE-2025-54163

CVE-2025-54163 affects File Station 5. A NULL pointer dereference vulnerability could be triggered by an administrator via network access, enabling a DoS condition. The CVSS-based assessment indicates high privileges are required, no user interaction, network access, and impact on availability (L...

CVE-2025-53410

CVE-2025-53410 affects QNAP File Station 5. The flaw is an allocation of resources without limits or throttling (DoS) that can be triggered by a user-authenticated remote attacker, potentially blocking access to resources for other systems/processes. Documents consistently identify File Station 5...

CVE-2025-54155

CVE-2025-54155 affects File Station 5. An unbounded resource allocation vulnerability exists in File Station 5 where, if an administrator account is compromised, the attacker can prevent other systems, applications, or processes from accessing the same resource. The CVSS 4.0 vector indicates a Ne...

CVE-2025-54162

CVE-2025-54162 is a path traversal vulnerability in File Station 5. If an administrator account is compromised, an attacker can read contents of unexpected files or system data. The issue is fixed in File Station 5, version 5.5.6.5068 and later. CVSS metrics from the document set: NETWORK exploit...

CVE-2025-54169

CVE-2025-54169 affects File Station 5. A remote attacker who has a user account can exploit an out-of-bounds read to access secret data. The vulnerability is characterized by NETWORK attack vector, low attack complexity, and no user interaction, with a CVSS v4.0 base score of 7.1 (HIGH). The impa...

CVE-2025-29888

CVE-2025-29888 affects QNAP File Station 5. A NULL pointer dereference vulnerability can be exploited remotely by an attacker who has a user account to cause a denial-of-service. The issue impacts File Station 5 and is fixed in version 5.5.6.4907 and later. Descriptions from multiple sources cons...

CVE-2025-47207

CVE-2025-47207 concerns a NULL pointer dereference in QNAP File Station 5. Affected versions include prior builds of File Station 5; exploitation requires a valid user account and can lead to a denial-of-service (DoS). The issue is fixed in File Station 5 versions 5.5.6.5018 and later. Several co...

CVE-2025-53408

CVE-2025-53408 corresponds to a NULL pointer dereference in QNAP File Station 5 that can be triggered when a remote attacker gains a user account, resulting in DoS. Affected product: File Station 5. Root cause: NULL pointer dereference. Impact: denial of service, with availability impact noted as...

CVE-2025-53409

CVE-2025-53409 affects QNAP File Station 5 on NAS devices. The vulnerability is an unlimited/unthrottled resource allocation flaw that, if a remote attacker gains a user account, can cause denial of access for other systems/applications/processes to the same resources. Public sources confirm the ...