Vulnerabilities

TI-2025-34006 CVE-2025-54163 · GHSA-76mg-x9r8-w496

NULL pointer dereference in QNAP File Station 5

LOW 9

A NULL pointer dereference vulnerability has been reported to affect File Station 5.

CVSS 4.0LOW 1.2 Network High privileges No interaction EPSS 0.00597 Published 2026-02-11 Fixed in 5.5.6.5166 CWE-476

TI-2025-35614 CVE-2025-57707 · GHSA-3v9p-vgm5-cgm3

LOW 8

An improper neutralization of directives in statically saved code ('Static Code Injection') vulnerability has been reported to affect File Station 5.

CVSS 4.0LOW 1.1 Network Low privileges User interaction EPSS 0.00727 Published 2026-02-11 Fixed in 5.5.6.5166 CWE-96

TI-2025-35620 CVE-2025-57713 · GHSA-mcfq-f994-8hqg

LOW 9

A weak authentication vulnerability has been reported to affect File Station 5.

CVSS 4.0LOW 1.3 Network No auth User interaction EPSS 0.00568 Published 2026-02-11 Fixed in 5.5.6.5166 CWE-1390

TI-2025-39006 CVE-2025-62853 · GHSA-g4c6-xx88-2hqq

LOW 27

A path traversal vulnerability has been reported to affect File Station 5.

CVSS 4.0MEDIUM 5.2 Network Low privileges No interaction EPSS 0.00663 Published 2026-02-11 Fixed in 5.5.6.5166 CWE-22