An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Oct 15, 2026 · NIST NVD

   Detected

   An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Virtualization Station 4.1.1.130 and later

2. Oct 15, 2026 · NIST NVD

   Updated

   An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Virtualization Station 4.1.1.130 and later

3. Oct 15, 2026 · NIST NVD

   Updated

   An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Virtualization Station 4.1.1.130 and later

Affected

• vendor QNAP Systems Inc. Virtualization Stationversion unspecified

Sources

• CIRCL Vulnerability LookupVulnerability recordCVE-2026-53882

  An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed t

  vulnerability.circl.lu
• CVE.orgVulnerability recordCVE-2026-53882

  An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed t

  cve.org
• FIRST EPSSExploitation probabilityCVE-2026-53882

  30-day exploitation probability 0.5%

  first.org
• NIST NVDVulnerability recordCVE-2026-53882

  An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed

  nvd.nist.gov

References

• Reference · qnap.com