Threat Investigation
Request a demo

CVE-2026-26240

Critical

Description

A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later

SeverityCritical
CVSS9.1
Exploit probability39. percentile0.4%
ProductQnap File Station
PublishedJun 10, 2026
First seenJun 10, 2026
Weakness typeCWE-121CWE-121

How to fix

Update
  • qnap file_station5.5.6.5243 or later

Affected products

ProductAffected versionsFixed in
qnap file_station5.5.6.4691 ≤ v < 5.5.6.52435.5.6.5243

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.