CVE-2026-44084
An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station.
Published Oct 15, 2026 · updated Oct 15, 2026 · QNAP Systems Inc. Video Station
An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: Video Station 5.8.8 and later
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 15, 2026 · NIST NVD
Detected
An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: Video Station 5.8.8 and later
Oct 15, 2026 · NIST NVD
Updated
An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: Video Station 5.8.8 and later
Oct 15, 2026 · NIST NVD
Updated
An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: Video Station 5.8.8 and later
Affected
- vendor QNAP Systems Inc. Video Stationversion unspecified
Sources
- CIRCL Vulnerability LookupVulnerability recordCVE-2026-44084
An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: Video Station 5.8.
vulnerability.circl.lu - CVE.orgVulnerability recordCVE-2026-44084
An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: Video Station 5.8.
cve.org - FIRST EPSSExploitation probabilityCVE-2026-44084
30-day exploitation probability 0.4%
first.org - NIST NVDVulnerability recordCVE-2026-44084
An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: Video Station 5.8
nvd.nist.gov