CVE-2026-24723
File Station 5: NULL Pointer Dereference in utilRequest.cgi
QNAP Systems Inc. File Station 5
CVSS
5.3MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.28%Chance of exploitation activity in the next 30 days, higher than 19% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 5.5.6.5243File Station 5CVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.
We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later
Text from CVE List
Affected versions 1
- File Station 5affected: 5.5.x before 5.5.6.5243CVE List