CVE-2026-26240lowCWE-121

CVE-2026-26240: low-severity vulnerability in QNAP Systems Inc. File Station 5

File Station 5

Published · Updated

Follow this CVE+ Monitor File Station

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 1.3epss 0.4%
A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:U
Affected products
QNAP Systems Inc. · File Station 5
Related CVEs — QNAP Systems Inc. File Station 5

In the same product, most dangerous first.

CVE-2025-57707LOWFile Station 5EPSS 0.7%CVE-2025-62853MEDIUMFile Station 5EPSS 0.7%CVE-2026-22894LOWFile Station 5EPSS 0.6%CVE-2025-62854LOWFile Station 5EPSS 0.6%CVE-2025-33035HIGHFile Station 5EPSS 0.6%CVE-2025-54163LOWFile Station 5EPSS 0.6%