CVE-2026-24720

MEDIUM

QNAP File Station 5 < 5.5.6.5243 - Resource Exhaustion

Title source: manual

Description

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later

References (1)

Core 1

Core References

https://www.qnap.com/en/security-advisory/qsa-26-26

Scores

CVSS v3 6.5

EPSS 0.0028

EPSS Percentile 19.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-770

Status published

Products (2)

qnap/file_station 5.5.6.4691 - 5.5.6.5243

QNAP Systems Inc./File Station 5 5.5.0 - 5.5.6.5243

Published Jun 10, 2026

Tracked Since Jun 10, 2026