Skip to content
OpenAdvisories
High · 8.4 CVE-2026-34009 EUVD-2026-101985GHSA-qj84-cjxx-3366

**Container Escape** Host user home directory mounted with write access into application container

Published Oct 15, 2026 · Updated Oct 15, 2026 · Assigned by qnap

Description

An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system.

We have already fixed the vulnerability in the following version:
Notes Station 3 3.9.11 and later

Affected products

VendorProductAffectedFixed
QNAP Systems Notes Station 3 3.9.x – < 3.9.11 3.9.11

References