This page lists publicly disclosed CVE vulnerabilities affecting qnap file_station (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-26241 | A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later | [email protected] | 1.3 | 0.32% | 2026-06-10 | 2026-06-17 |
| CVE-2026-26240 | A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later | [email protected] | 1.3 | 0.32% | 2026-06-10 | 2026-06-17 |
| CVE-2026-26239 | A buffer overflow vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5208 and later | [email protected] | 6.3 | 0.29% | 2026-06-10 | 2026-06-17 |
| CVE-2026-24724 | An incorrect authorization vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass intended access restrictions. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later | [email protected] | 6.2 | 0.26% | 2026-06-10 | 2026-06-17 |
| CVE-2026-24720 | An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later | [email protected] | 1.3 | 0.28% | 2026-06-10 | 2026-06-17 |
| CVE-2026-22899 | A NULL pointer dereference vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5208 and later | [email protected] | 1.3 | 0.28% | 2026-06-10 | 2026-06-17 |
| CVE-2026-22894 | A path traversal vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5190 and later | [email protected] | 1.3 | 0.54% | 2026-02-11 | 2026-06-17 |
| CVE-2025-66278 | A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5190 and later | [email protected] | 1.3 | 0.42% | 2026-02-11 | 2026-06-17 |
| CVE-2025-62856 | A path traversal vulnerability has been reported to affect File Station 5. If a local attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5190 and later | [email protected] | 1.3 | 0.33% | 2026-02-11 | 2026-06-17 |
| CVE-2025-62855 | A path traversal vulnerability has been reported to affect File Station 5. If a local attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5190 and later | [email protected] | 1.3 | 0.34% | 2026-02-11 | 2026-06-17 |
| CVE-2025-62854 | An uncontrolled resource consumption vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5190 and later | [email protected] | 1.3 | 0.53% | 2026-02-11 | 2026-06-17 |
| CVE-2025-62853 | A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5166 and later | [email protected] | 5.2 | 0.60% | 2026-02-11 | 2026-06-17 |
| CVE-2025-57713 | A weak authentication vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to gain sensitive information. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5166 and later | [email protected] | 1.3 | 0.51% | 2026-02-11 | 2026-06-17 |
| CVE-2025-57707 | An improper neutralization of directives in statically saved code ('Static Code Injection') vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to access restricted data / files. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5166 and later | [email protected] | 1.1 | 0.66% | 2026-02-11 | 2026-06-17 |
| CVE-2025-54169 | An out-of-bounds read vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5068 and later | [email protected] | 4.9 | 0.34% | 2026-02-11 | 2026-06-17 |
| CVE-2025-54163 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5166 and later | [email protected] | 1.2 | 0.50% | 2026-02-11 | 2026-06-17 |
| CVE-2025-54162 | A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5068 and later | [email protected] | 4.8 | 0.44% | 2026-02-11 | 2026-06-17 |
| CVE-2025-54161 | An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5068 and later | [email protected] | 3.6 | 0.41% | 2026-02-11 | 2026-06-17 |
| CVE-2025-54155 | An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5018 and later | [email protected] | 3.6 | 0.41% | 2026-02-11 | 2026-06-17 |
| CVE-2025-57706 | A cross-site scripting (XSS) vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5018 and later | [email protected] | 2.2 | 0.17% | 2025-11-07 | 2026-06-17 |