Findings

CVE-2026-24723

A NULL pointer dereference vulnerability has been reported to affect File Station 5.

Published Oct 15, 2026 · updated Oct 15, 2026 · QNAP Systems Inc. File Station 5

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later

Timeline

Detection, updates, and resolution for this record.

  1. Oct 15, 2026 · NIST NVD

    Detected

    A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later

  2. Oct 15, 2026 · NIST NVD

    Updated

    A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later

Affected

  • vendor QNAP Systems Inc. File Station 5version unspecified

Sources

  • A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Fi

    vulnerability.circl.lu
  • CVE.orgCVE-2026-24723

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2026-24723

    A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: F

    nvd.nist.gov

References

CVE-2026-24723 · ZeroDay Findings