qnap file station

Name: qnap file station
Brand: qnap

productUS

cpe:2.3:a:qnap:file_station:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

by severity

3critical16high38medium0low

updated 2026-10-28

vulnerabilities (57)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-57707US	high8.8	0.74% (54th)	—	5.5.6.5190	2026-02-11	5.5.6.4691 → 5.5.6.5190
CVE-2025-62853US	medium6.5	0.67% (52nd)	—	5.5.6.5190	2026-02-11	5.5.6.4691 → 5.5.6.5190
CVE-2026-22894US	medium6.5	0.62% (50th)	—	5.5.6.5190	2026-02-11	5.5.6.4691 → 5.5.6.5190
CVE-2025-62854US	medium6.5	0.60% (49th)	—	5.5.6.5190	2026-02-11	5.5.6.4691 → 5.5.6.5190
CVE-2025-54163US	medium4.9	0.58% (48th)	—	5.5.6.5190	2026-02-11	5.5.6.4691 → 5.5.6.5190
CVE-2025-57713US	high7.5	0.58% (47th)	—	5.5.6.5190	2026-02-11	5.5.6.4691 → 5.5.6.5190
CVE-2025-33035US	medium6.5	0.56% (47th)	—	5.5.6.4847	2025-06-06	5.5.6.4691 → 5.5.6.4847
CVE-2025-53411US	medium4.9	0.52% (44th)	—	5.5.6.5018	2025-11-07	5.5.6.4691 → 5.5.6.5018
CVE-2025-54162US	medium4.9	0.51% (43rd)	—	5.5.6.5190	2026-02-11	5.5.6.4691 → 5.5.6.5190
CVE-2025-53413US	medium6.5	0.50% (42nd)	—	5.5.6.5018	2025-11-07	5.5.6.4691 → 5.5.6.5018
CVE-2025-53412US	medium6.5	0.50% (42nd)	—	5.5.6.5018	2025-11-07	5.5.6.4691 → 5.5.6.5018
CVE-2025-53410US	medium6.5	0.50% (42nd)	—	5.5.6.5018	2025-11-07	5.5.6.4691 → 5.5.6.5018
CVE-2025-53409US	medium6.5	0.50% (42nd)	—	5.5.6.5018	2025-11-07	5.5.6.4691 → 5.5.6.5018
CVE-2024-48864US	critical9.1	0.49% (42nd)	—	5.5.6.4741	2025-03-07	5.5.6.4691 → 5.5.6.4741
CVE-2025-66278US	medium6.5	0.48% (42nd)	—	5.5.6.5190	2026-02-11	5.5.6.4691 → 5.5.6.5190
CVE-2025-54161US	medium4.9	0.47% (41st)	—	5.5.6.5190	2026-02-11	5.5.6.4691 → 5.5.6.5190
CVE-2025-54155US	medium4.9	0.46% (40th)	—	5.5.6.5190	2026-02-11	5.5.6.4691 → 5.5.6.5190
CVE-2025-29900US	medium6.5	0.46% (40th)	—	5.5.6.4907	2025-08-29	5.5.6.4691 → 5.5.6.4907
CVE-2025-29899US	medium6.5	0.46% (40th)	—	5.5.6.4907	2025-08-29	5.5.6.4691 → 5.5.6.4907
CVE-2025-29890US	medium6.5	0.46% (40th)	—	5.5.6.4907	2025-08-29	5.5.6.4691 → 5.5.6.4907
CVE-2025-29889US	medium6.5	0.46% (40th)	—	5.5.6.4907	2025-08-29	5.5.6.4691 → 5.5.6.4907
CVE-2025-29888US	medium6.5	0.46% (40th)	—	5.5.6.4907	2025-08-29	5.5.6.4691 → 5.5.6.4907
CVE-2025-29886US	medium6.5	0.46% (40th)	—	5.5.6.4907	2025-08-29	5.5.6.4691 → 5.5.6.4907
CVE-2025-29879US	medium6.5	0.46% (40th)	—	5.5.6.4907	2025-08-29	5.5.6.4691 → 5.5.6.4907
CVE-2025-29878US	medium6.5	0.46% (40th)	—	5.5.6.4907	2025-08-29	5.5.6.4691 → 5.5.6.4907
CVE-2025-29875US	medium6.5	0.46% (40th)	—	5.5.6.4907	2025-08-29	5.5.6.4691 → 5.5.6.4907
CVE-2025-29874US	medium6.5	0.46% (40th)	—	5.5.6.4907	2025-08-29	5.5.6.4691 → 5.5.6.4907
CVE-2026-26241US	critical9.1	0.46% (40th)	—	5.5.6.5243	2026-06-10	5.5.6.4691 → 5.5.6.5243
CVE-2026-26240US	critical9.1	0.44% (38th)	—	5.5.6.5243	2026-06-10	5.5.6.4691 → 5.5.6.5243
CVE-2025-29877US	high7.5	0.43% (38th)	—	5.5.6.4847	2025-06-06	5.5.6.4691 → 5.5.6.4847
CVE-2025-29876US	high7.5	0.43% (38th)	—	5.5.6.4847	2025-06-06	5.5.6.4691 → 5.5.6.4847
CVE-2025-29873US	high7.5	0.43% (38th)	—	5.5.6.4847	2025-06-06	5.5.6.4691 → 5.5.6.4847
CVE-2025-29872US	high7.5	0.43% (38th)	—	5.5.6.4847	2025-06-06	5.5.6.4691 → 5.5.6.4847
CVE-2025-22490US	high7.5	0.43% (38th)	—	5.5.6.4847	2025-06-06	5.5.6.4691 → 5.5.6.4847
CVE-2026-26239US	high8.1	0.42% (36th)	—	5.5.6.5208	2026-06-10	5.5.6.4691 → 5.5.6.5208
CVE-2025-54169US	medium6.5	0.39% (33rd)	—	5.5.6.5190	2026-02-11	5.5.6.4691 → 5.5.6.5190
CVE-2025-62856US	medium4.4	0.39% (33rd)	—	5.5.6.5190	2026-02-11	5.5.6.4691 → 5.5.6.5190
CVE-2025-47206US	high8.1	0.38% (32nd)	—	5.5.6.4933	2025-08-18	5.5.6.4691 → 5.5.6.4933
CVE-2026-24720US	medium6.5	0.38% (32nd)	—	5.5.6.5243	2026-06-10	5.5.6.4691 → 5.5.6.5243
CVE-2026-22899US	medium6.5	0.38% (32nd)	—	5.5.6.5208	2026-06-10	5.5.6.4691 → 5.5.6.5208
CVE-2025-62855US	medium4.4	0.38% (32nd)	—	5.5.6.5190	2026-02-11	5.5.6.4691 → 5.5.6.5190
CVE-2025-29901US	medium6.5	0.37% (31st)	—	5.5.6.4933	2025-08-26	5.5.6.4691 → 5.5.6.4933
CVE-2025-53408US	medium6.5	0.36% (30th)	—	5.5.6.5018	2025-11-07	5.5.6.4691 → 5.5.6.5018
CVE-2025-52865US	medium6.5	0.36% (30th)	—	5.5.6.5018	2025-11-07	5.5.6.4691 → 5.5.6.5018
CVE-2025-47207US	medium6.5	0.36% (30th)	—	5.5.6.5018	2025-11-07	5.5.6.4691 → 5.5.6.5018
CVE-2026-24724US	high8.1OT elevated	0.34% (27th)	—	5.5.6.5243	2026-06-10	5.5.6.4691 → 5.5.6.5243
CVE-2026-24723US	medium6.5	0.28% (20th)	—	5.5.6.5243	2026-10-15	< 5.5.6.5243
CVE-2026-24722US	medium6.5	0.28% (20th)	—	5.5.6.5243	2026-10-15	< 5.5.6.5243
CVE-2026-24721US	medium6.5	0.28% (20th)	—	5.5.6.5243	2026-10-15	< 5.5.6.5243
CVE-2025-33031US	high8.8	0.26% (18th)	—	5.5.6.4847	2025-06-06	5.5.6.4691 → 5.5.6.4847

showing 50 of 57

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-476NULL Pointer Dereference21 CVEs
CWE-770Allocation of Resources Without Limits or Throttling11 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')7 CVEs
CWE-295Improper Certificate Validation6 CVEs
CWE-121Stack-based Buffer Overflow3 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-1390Weak Authentication1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE57 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan