by Kastro
Paper/Archive/CVE-2026-26240

CVE-2026-26240

QNAP Systems Inc. File Station 5 — File Station 5

EPSS 0.4%CVSS 9.1
critical.is priorityof 100
35
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 38.4.384 × 207.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later

Affected

ProductAffectedFixed inSource
File Station 55.5.0 – < 5.5.6.52435.5.6.5243CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
qnap (CNA)1.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:U
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refqnap.com/en/security-advisory/qsa-26-10