Description
A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processes.

We have already fixed the vulnerability in the following version:
File Station 5 5.5.6.5243 and later
Published: 2026-06-10
Score: 1.3 Low
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A buffer overflow flaw exists in QNAP File Station 5 that allows attackers to corrupt application memory or cause a crash. The vulnerability is identified as CWE-121, a classic buffer overflow scenario. Remote attackers can modify memory or crash processes.

Affected Systems

The vulnerability affects QNAP Systems Inc.’s File Station 5, specifically versions prior to 5.5.6.5243. Any device running a lower version is susceptible. No other products are listed as impacted.

Risk and Exploitability

The CVSS score of 1.3 indicates low severity, and the EPSS score is <1%, suggesting a very low exploitation probability. The vulnerability is not listed in the CISA KEV catalog, indicating it has not been widely observed in the wild. The exploit appears to be remote; attackers would need network access to the File Station interface to trigger the buffer overflow.

Generated by OpenCVE AI on June 17, 2026 at 20:32 UTC.

Remediation

Vendor Solution

We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later

OpenCVE Recommended Actions

  • Upgrade File Station to version 5.5.6.5243 or later, which contains the fix.
  • Limit external network access to the File Station service by applying firewall rules or placing the device in a trusted subnet.
  • Continuously monitor system logs for crashes or anomalous memory activity that may indicate an exploitation attempt.

Generated by OpenCVE AI on June 17, 2026 at 20:32 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 17 Jun 2026 05:15:00 +0000

Type Values Removed Values Added
References
Metrics cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N'}

 cvssV4_0

{'score': 1.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U'}

Fri, 12 Jun 2026 13:00:00 +0000

Type Values Removed Values Added
First Time appeared Qnap
Qnap file Station
CPEs cpe:2.3:a:qnap:file_station:*:*:*:*:*:*:*:*
Vendors & Products Qnap
Qnap file Station
Metrics cvssV3_1

{'score': 9.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H'}

Wed, 10 Jun 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 10 Jun 2026 08:15:00 +0000

Type Values Removed Values Added
First Time appeared Qnap Systems
Qnap Systems file Station 5
Vendors & Products Qnap Systems
Qnap Systems file Station 5

Wed, 10 Jun 2026 05:15:00 +0000

Type Values Removed Values Added
Description A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later
Title File Station 5
Weaknesses CWE-121
References
Metrics cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Qnap File Station
Qnap Systems File Station 5
cve-icon MITRE

Status: PUBLISHED

Assigner: qnap

Published:

Updated: 2026-06-17T01:47:32.605Z

Reserved: 2026-02-12T02:21:35.483Z

Link: CVE-2026-26241

cve-icon Vulnrichment

Updated: 2026-06-10T15:06:59.047Z

cve-icon NVD

Status : Analyzed

Published: 2026-06-10T05:16:39.103

Modified: 2026-06-12T12:51:25.803

Link: CVE-2026-26241

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-17T20:45:03Z

Weaknesses
  • CWE-121

    Stack-based Buffer Overflow