5.3Medium
CVE-2026-24723NULL Pointer Dereference in utilRequest.cgi
Description
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later
Weakness (CWE):
CWE-476
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| qnap | file station | < 5.5.6.5243 | |
| QNAP Systems Inc. | File Station 5 | 5.5.x – < 5.5.6.5243 |
References and patches
- https://www.qnap.com/en/app-release-notes?keyword=FileStation5&app=FileStation5&product-line=nas release-notesRelease Notes
CPE matches (NVD) (1)
cpe:2.3:a:qnap:file_station:*:*:*:*:*:*:*:*< 5.5.6.5243