5.3Mittel

CVE-2026-24723NULL Pointer Dereference in utilRequest.cgi

QNAP Systems Inc. File Station 5 Veröffentlicht: (vor 1 Monat)

Beschreibung

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later

Schwachstellentyp (CWE): CWE-476

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
qnap file station < 5.5.6.5243
QNAP Systems Inc. File Station 5 5.5.x – < 5.5.6.5243

Referenzen und Patches

CPE-Treffer (NVD) (1)

  • cpe:2.3:a:qnap:file_station:*:*:*:*:*:*:*:* < 5.5.6.5243