How many QNAP file station CVEs are in CISA KEV?

None of QNAP file station's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of QNAP file station are affected?

18 distinct QNAP file station versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in QNAP file station CVEs?

QNAP file station's CVEs most often map to these CWE weakness types: CWE-476 (NULL Pointer Dereference), CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-295 (Improper Certificate Validation), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).

What is the average severity of QNAP file station CVEs?

The average CVSS base score across QNAP file station's scored CVEs is 4.5.

QNAP file station Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: QNAP file station vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

QNAP file station Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

QNAP file station has 54 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 4.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting QNAP file station, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of QNAP file station's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High14

Medium20

Low20

In CISA’s Known Exploited Vulnerabilities catalog

None of QNAP file station's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No QNAP file station CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every QNAP file station version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

5.5.6.4691 <= v < 5.5.6.519013 CVEs
5.5.6.4691 <= v < 5.5.6.490710 CVEs
5.5.6.4691 <= v < 5.5.6.48479 CVEs
5.5.6.4691 <= v < 5.5.6.50189 CVEs
5.5.6.4691 <= v < 5.5.6.47914 CVEs
5.5.6.4691 <= v < 5.5.6.52434 CVEs
5.5.6.4691 <= v < 5.5.6.49332 CVEs
5.5.6.4691 <= v < 5.5.6.52082 CVEs
5.5.6.4691 <= v < 5.5.6.47411 CVE

Fixed in

5.5.6.519013 CVEs

Common weakness types

The CWE weakness categories most often found in QNAP file station CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many QNAP file station CVEs were published each year.

2025

2026

Other QNAP products

Browse vulnerabilities for other products by QNAP.

QTS323 CVEs QuTS hero253 CVEs qutscloud77 CVEs Qsync Central63 CVEs File Station 555 CVEs Photo Station26 CVEs Video Station15 CVEs media streaming add-on13 CVEs

Frequently asked questions

Common questions about QNAP file station vulnerabilities.

How many CVEs does QNAP file station have?: QNAP file station has 54 published CVE records since 2025.
How many QNAP file station CVEs are in CISA KEV?: None of QNAP file station's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for QNAP file station vulnerabilities?: No QNAP file station CVEs currently have a tracked public exploit in this dataset.
Which versions of QNAP file station are affected?: 18 distinct QNAP file station versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in QNAP file station CVEs?: QNAP file station's CVEs most often map to these CWE weakness types: CWE-476 (NULL Pointer Dereference), CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-295 (Improper Certificate Validation), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
What is the average severity of QNAP file station CVEs?: The average CVSS base score across QNAP file station's scored CVEs is 4.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track QNAP file station vulnerabilities

Monitor new QNAP file station vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

Find a version

54 CVEs

Sort

File Station 5
CVE-2026-26240
Patch
CWE-121
Low · CVSS 1.3
EPSS 0.4% (37th pct)2026-06-10
File Station 5
CVE-2026-26241
Patch
CWE-121
Low · CVSS 1.3
EPSS 0.5% (38th pct)2026-06-10
File Station 5
CVE-2026-24724
Patch
CWE-863
Medium · CVSS 6.2
EPSS 0.3% (26th pct)2026-06-10
File Station 5
CVE-2026-26239
Patch
CWE-121
Medium · CVSS 6.3
EPSS 0.4% (35th pct)2026-06-10
File Station 5
CVE-2026-24720
Patch
CWE-770
Low · CVSS 1.3
EPSS 0.4% (31th pct)2026-06-10
File Station 5
CVE-2026-22899
Patch
CWE-476
Low · CVSS 1.3
EPSS 0.4% (31th pct)2026-06-10
File Station 5
CVE-2025-54155
Patch
CWE-770
Low · CVSS 3.6
EPSS 0.4% (34th pct)2026-02-11
File Station 5
CVE-2025-54161
Patch
CWE-770
Low · CVSS 3.6
EPSS 0.4% (34th pct)2026-02-11
File Station 5
CVE-2025-54162
Patch
CWE-73
Medium · CVSS 4.8
EPSS 0.4% (36th pct)2026-02-11
File Station 5
CVE-2025-54163
Patch
CWE-476
Low · CVSS 1.2
EPSS 0.5% (41th pct)2026-02-11
File Station 5
CVE-2025-54169
Patch
CWE-125
Medium · CVSS 4.9
EPSS 0.3% (26th pct)2026-02-11
File Station 5
CVE-2025-57707
Patch
CWE-96
Low · CVSS 1.1
EPSS 0.7% (49th pct)2026-02-11
File Station 5
CVE-2025-57713
Patch
CWE-1390
Low · CVSS 1.3
EPSS 0.5% (42th pct)2026-02-11
File Station 5
CVE-2025-62853
Patch
CWE-22
Medium · CVSS 5.2
EPSS 0.6% (46th pct)2026-02-11
File Station 5
CVE-2025-62854
Patch
CWE-400
Low · CVSS 1.3
EPSS 0.5% (43th pct)2026-02-11
File Station 5
CVE-2025-62855
Patch
CWE-22
Low · CVSS 1.3
EPSS 0.3% (27th pct)2026-02-11
File Station 5
CVE-2025-62856
Patch
CWE-22
Low · CVSS 1.3
EPSS 0.3% (26th pct)2026-02-11
File Station 5
CVE-2025-66278
Patch
CWE-22
Low · CVSS 1.3
EPSS 0.4% (35th pct)2026-02-11
File Station 5
CVE-2026-22894
Patch
CWE-22
Low · CVSS 1.3
EPSS 0.5% (43th pct)2026-02-11
File Station 5
CVE-2025-47207
Patch
CWE-476
Medium · CVSS 5.3
EPSS 0.3% (27th pct)2025-11-07
File Station 5
CVE-2025-52865
Patch
CWE-476
Low · CVSS 1.3
EPSS 0.3% (27th pct)2025-11-07
File Station 5
CVE-2025-53408
Patch
CWE-476
Low · CVSS 1.3
EPSS 0.3% (27th pct)2025-11-07
File Station 5
CVE-2025-53409
Patch
CWE-770
Medium · CVSS 4.9
EPSS 0.5% (38th pct)2025-11-07
File Station 5
CVE-2025-53410
Patch
CWE-770
Medium · CVSS 4.9
EPSS 0.5% (38th pct)2025-11-07
File Station 5
CVE-2025-53411
Patch
CWE-770
Low · CVSS 1.2
EPSS 0.5% (40th pct)2025-11-07
File Station 5
CVE-2025-53412
Patch
CWE-476
Low · CVSS 0.6
EPSS 0.5% (38th pct)2025-11-07
File Station 5
CVE-2025-53413
Patch
CWE-770
Medium · CVSS 4.9
EPSS 0.5% (38th pct)2025-11-07
File Station 5
CVE-2025-57706
Patch
CWE-79
Low · CVSS 2.2
EPSS 0.2% (10th pct)2025-11-07
File Station 5
CVE-2025-29900
Patch
CWE-770
High · CVSS 7.1
EPSS 0.4% (37th pct)2025-08-29
File Station 5
CVE-2025-29899
Patch
CWE-770
High · CVSS 7.1
EPSS 0.4% (37th pct)2025-08-29

Showing 30 of 54