Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-24723 EUVD-2026-101878GHSA-57mw-7fjr-r57f

NULL Pointer Dereference in utilRequest.cgi

Published Oct 15, 2026 · Updated Oct 15, 2026 · Assigned by qnap

Description

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.

We have already fixed the vulnerability in the following version:
File Station 5 5.5.6.5243 and later

Affected products

VendorProductAffectedFixed
QNAP Systems File Station 5 5.5.x – < 5.5.6.5243 5.5.6.5243

References