CVE-2026-24722: qnap file_station

CVSS 6.5 (medium) · published 2026-10-15

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later

Affected products (NVD): qnap file_station

Fixed in (NVD): 5.5.6.5243

Weakness: CWE-476

Source: NVD CVE-2026-24722

References

• https://www.qnap.com/en/app-release-notes?keyword=FileStation5&app=FileStation5&product-line=nas

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.