5.3Media
CVE-2026-24723NULL Pointer Dereference in utilRequest.cgi
Descripción
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later
Debilidad (CWE):
CWE-476
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| qnap | file station | < 5.5.6.5243 | |
| QNAP Systems Inc. | File Station 5 | 5.5.x – < 5.5.6.5243 |
Referencias y parches
- https://www.qnap.com/en/app-release-notes?keyword=FileStation5&app=FileStation5&product-line=nas release-notesRelease Notes
Coincidencias CPE (NVD) (1)
cpe:2.3:a:qnap:file_station:*:*:*:*:*:*:*:*< 5.5.6.5243