QNAP Video Station
Moderate fix1 remedy
cpe:2.3:a:qnap:video_station:*:*:*:*:*:*:*
Moderate fix1 remedy
- ~5.8
QNAP Video Station SQL Injection Vulnerability Allowing Unauthorized Code Execution
Vulnerability
Patched
A SQL injection vulnerability has been identified in QNAP Video Station versions 5.8.x. This vulnerability allows remote attackers with user account access to execute unauthorized code or commands. The issue has been resolved in Video Station version 5.8.4 and later.
Impact
Exploitation of this vulnerability could lead to unauthorized code execution on the affected system.
Remediation
Users are advised to update QNAP Video Station to the latest version. Instructions for updating the application are available on the QNAP website.
Added: Oct 3, 2025, 6:22 PM
Updated: Oct 3, 2025, 6:22 PM
Vulnerability Rating
Custom Algorithm
spread
6.8impact
10.0exploitability
4.9remediation
7.7relevance
0.6threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.