Skip to content
OpenAdvisories
High · 8.7 CVE-2026-44084 EUVD-2026-101980GHSA-2qpr-rvc3-jx3g

Access Code Forgery in Video Station leading to unauthorized media access

Published Oct 15, 2026 · Updated Oct 15, 2026 · Assigned by qnap

Description

An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data.

We have already fixed the vulnerability in the following version:
Video Station 5.8.8 and later

Affected products

VendorProductAffectedFixed
QNAP Systems Video Station 5.8.x – < 5.8.8 5.8.8

References