Findings

CVE-2024-14024

An improper certificate validation vulnerability has been reported to affect Video Station.

Published Mar 11, 2026 · updated Jun 17, 2026 · qnap video station

An improper certificate validation vulnerability has been reported to affect Video Station. If an attacker gains local network access who have also gained an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Video Station 5.8.2 and later

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 11, 2026 · NIST NVD

    Detected

    An improper certificate validation vulnerability has been reported to affect Video Station. If an attacker gains local network access who have also gained an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Video Station 5.8.2 and later

  2. Jun 17, 2026 · NIST NVD

    Updated

    An improper certificate validation vulnerability has been reported to affect Video Station. If an attacker gains local network access who have also gained an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Video Station 5.8.2 and later

Affected

  • cpe qnap/video stationversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2024-14024

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2024-14024

    An improper certificate validation vulnerability has been reported to affect Video Station. If an attacker gains local network access who have also gained an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already

    nvd.nist.gov

References