qnap

9 records · 0 with a public proof-of-concept

Disclosed vulnerabilities where the NVD names qnap as an affected vendor, highest CVSS first.

  1. HIGH 8.8CVE-2026-262452026-10-15

    A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following vers…

    video station

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 8.8CVE-2026-262442026-10-15

    A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following vers…

    video station

    AI risk analysis on Exploit-DB.ai →

  3. HIGH 7.5CVE-2026-440842026-10-15

    An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following versio…

    video station

    AI risk analysis on Exploit-DB.ai →

  4. MEDIUM 6.5CVE-2026-340152026-10-15

    A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in th…

    video station

    AI risk analysis on Exploit-DB.ai →

  5. MEDIUM 6.5CVE-2026-247232026-10-15

    A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the …

    file station

    AI risk analysis on Exploit-DB.ai →

  6. MEDIUM 6.5CVE-2026-247222026-10-15

    A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the …

    file station

    AI risk analysis on Exploit-DB.ai →

  7. MEDIUM 6.5CVE-2026-247212026-10-15

    A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the …

    file station

    AI risk analysis on Exploit-DB.ai →

  8. MEDIUM 6.5CVE-2025-662752026-10-15

    A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in th…

    video station

    AI risk analysis on Exploit-DB.ai →

  9. MEDIUM 6.5CVE-2025-662722026-10-15

    A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in th…

    video station

    AI risk analysis on Exploit-DB.ai →