8.7Yüksek

CVE-2026-53882Path Traversal in Virtualization Station VM Import

QNAP Systems Inc. Virtualization Station Yayım: (1 ay önce)

Açıklama

An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Virtualization Station 4.1.1.130 and later

Zayıflık türü (CWE): CWE-59

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
QNAP Systems Inc. Virtualization Station 4.1.x – < 4.1.1.130

Kaynaklar ve yamalar