5.3Mittel
CVE-2026-24723NULL Pointer Dereference in utilRequest.cgi
Beschreibung
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later
Schwachstellentyp (CWE):
CWE-476
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| qnap | file station | < 5.5.6.5243 | |
| QNAP Systems Inc. | File Station 5 | 5.5.x – < 5.5.6.5243 |
Referenzen und Patches
- https://www.qnap.com/en/app-release-notes?keyword=FileStation5&app=FileStation5&product-line=nas release-notesRelease Notes
CPE-Treffer (NVD) (1)
cpe:2.3:a:qnap:file_station:*:*:*:*:*:*:*:*< 5.5.6.5243