CVE-2026-26240

CRITICAL

Qnap Systems Inc. File Station 5 < 5.5.6.5243 - Buffer Overflow

Title source: rule

Description

A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later

References (1)

Core 1

Core References

https://www.qnap.com/en/security-advisory/qsa-26-32

Scores

CVSS v3 9.1

EPSS 0.0032

EPSS Percentile 23.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-121

Status published

Products (2)

qnap/file_station 5.5.6.4691 - 5.5.6.5243

QNAP Systems Inc./File Station 5 5.5.0 - 5.5.6.5243

Published Jun 10, 2026

Tracked Since Jun 10, 2026