5.3Orta
CVE-2026-24723NULL Pointer Dereference in utilRequest.cgi
Açıklama
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later
Zayıflık türü (CWE):
CWE-476
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| qnap | file station | < 5.5.6.5243 | |
| QNAP Systems Inc. | File Station 5 | 5.5.x – < 5.5.6.5243 |
Kaynaklar ve yamalar
- https://www.qnap.com/en/app-release-notes?keyword=FileStation5&app=FileStation5&product-line=nas release-notesRelease Notes
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:qnap:file_station:*:*:*:*:*:*:*:*< 5.5.6.5243