Vulnerabilities

TI-2026-74713 CVE-2026-44084 · GHSA-2qpr-rvc3-jx3g

Access code forgery in QNAP Video Station exposes media

MEDIUM 43

An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00313 Published 2026-10-15 Fixed in 5.8.8 CWE-639

TI-2026-74707 CVE-2026-34015 · GHSA-xx2f-mrj8-vvvm

MEDIUM 40

A path traversal vulnerability has been reported to affect Video Station.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00382 Published 2026-10-15 Fixed in 5.8.8 CWE-22

TI-2026-74701 CVE-2026-26245 · GHSA-c4hh-r3f4-jj3q

LOW 31

A SQL injection vulnerability has been reported to affect Video Station.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00377 Published 2026-10-15 Fixed in 5.8.8 CWE-89

TI-2026-74700 CVE-2026-26244 · GHSA-56p7-9gfr-8cpw

LOW 31

A SQL injection vulnerability has been reported to affect Video Station.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00377 Published 2026-10-15 Fixed in 5.8.8 CWE-89