Qnap Systems Inc File Station 5 vulnerabilities

CVE-2025-54169 [MEDIUM] CWE-125 CVE-2025-54169: An out-of-bounds read vulnerability has been reported to affect File Station 5. If a remote attacker An out-of-bounds read vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5068 and later

CVE-2025-53410 [MEDIUM] CWE-770 CVE-2025-53410: An allocation of resources without limits or throttling vulnerability has been reported to affect Fi An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following v

CVE-2025-53409 [MEDIUM] CWE-770 CVE-2025-53409: An allocation of resources without limits or throttling vulnerability has been reported to affect Fi An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following v

CVE-2025-53413 [MEDIUM] CWE-770 CVE-2025-53413: An allocation of resources without limits or throttling vulnerability has been reported to affect Fi An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following v

CVE-2026-24720 [MEDIUM] CWE-770 CVE-2026-24720: An allocation of resources without limits or throttling vulnerability has been reported to affect Fi An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following v

CVE-2025-29890 [MEDIUM] CWE-770 CVE-2025-29890: An allocation of resources without limits or throttling vulnerability has been reported to affect Fi An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following v

CVE-2025-29899 [MEDIUM] CWE-770 CVE-2025-29899: An allocation of resources without limits or throttling vulnerability has been reported to affect Fi An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following v

CVE-2025-29900 [MEDIUM] CWE-770 CVE-2025-29900: An allocation of resources without limits or throttling vulnerability has been reported to affect Fi An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following v

CVE-2025-29877 [HIGH] CWE-476 CVE-2025-29877: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote at A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4847 and later

CVE-2025-22490 [HIGH] CWE-476 CVE-2025-22490: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote at A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4847 and later

CVE-2025-29876 [HIGH] CWE-476 CVE-2025-29876: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote at A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4847 and later

CVE-2025-29873 [HIGH] CWE-476 CVE-2025-29873: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote at A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4847 and later

CVE-2025-62854 [MEDIUM] CWE-400 CVE-2025-62854: An uncontrolled resource consumption vulnerability has been reported to affect File Station 5. If a An uncontrolled resource consumption vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5190 and later

CVE-2025-47207 [MEDIUM] CWE-476 CVE-2025-47207: A NULL pointer dereference vulnerability has been reported to affect several product versions. If a A NULL pointer dereference vulnerability has been reported to affect several product versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5018 and later

CVE-2025-53412 [MEDIUM] CWE-476 CVE-2025-53412: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote att A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5018 and later

CVE-2026-22899 [MEDIUM] CWE-476 CVE-2026-22899: A NULL pointer dereference vulnerability has been reported to affect File Station 6. If a remote att A NULL pointer dereference vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5208 and later

CVE-2025-52865 [MEDIUM] CWE-476 CVE-2025-52865: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote att A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5018 and later

CVE-2025-53408 [MEDIUM] CWE-476 CVE-2025-53408: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote att A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5018 and later

CVE-2025-29874 [MEDIUM] CWE-476 CVE-2025-29874: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote att A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4907 and later

CVE-2025-29878 [MEDIUM] CWE-476 CVE-2025-29878: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote att A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4907 and later