CVE-2026-39997
A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station.
Published Oct 15, 2026 · updated Oct 15, 2026 · QNAP Systems Inc. HybridDesk Station
A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.22 and later
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 15, 2026 · NIST NVD
Detected
A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.22 and later
Oct 15, 2026 · NIST NVD
Updated
A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.22 and later
Oct 15, 2026 · NIST NVD
Updated
A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.22 and later
Affected
- vendor QNAP Systems Inc. HybridDesk Stationversion unspecified
Sources
- CIRCL Vulnerability LookupVulnerability recordCVE-2026-39997
A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability in the following version: HybridDesk Sta
vulnerability.circl.lu - CVE.orgVulnerability recordCVE-2026-39997
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2026-39997
30-day exploitation probability 0.4%
first.org - NIST NVDVulnerability recordCVE-2026-39997
A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability in the following version: HybridDesk St
nvd.nist.gov