QNAP File Station 5 Resource Exhaustion Vulnerability

Vulnerability

A vulnerability allowing resource exhaustion without limits or throttling has been identified in QNAP File Station 5, specifically in versions 5.5.x. This vulnerability can be exploited by remote attackers who gain access to a user account, allowing them to monopolize resources and disrupt access for other systems, applications, or processes that require the same type of resource.

Impact

Exploitation of this vulnerability can lead to resource exhaustion, causing disruptions in resource availability for other systems, applications, or processes.

Remediation

Users are advised to update QNAP File Station 5 to version 5.5.6.5018 or later. Instructions for updating the application are available on the QNAP website.

Added: Nov 7, 2025, 4:28 PM
Updated: Nov 7, 2025, 4:28 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
5.2
remediation
7.7
relevance
1.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.