Skip to content
OpenAdvisories
Low · 1.2 CVE-2025-54163 EUVD-2025-207433GHSA-76mg-x9r8-w496

File Station 5

Published Feb 11, 2026 · Updated Feb 11, 2026 · Assigned by qnap

Description

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.

We have already fixed the vulnerability in the following version:
File Station 5 5.5.6.5166 and later

Affected products

VendorProductAffectedFixed
QNAP Systems File Station 5 5.5.x – < 5.5.6.5166 5.5.6.5166

References