QNAP File Station 5 Static Code Injection Vulnerability Allowing Access to Restricted Data
Vulnerability
A static code injection vulnerability has been identified in QNAP File Station 5 versions 5.5.x. This vulnerability allows remote attackers with user account access to inject directives into statically saved code, potentially leading to unauthorized access to restricted data or files.
Impact
Exploitation of this vulnerability could result in unauthorized access to restricted data or files.
Remediation
Users are advised to update QNAP File Station 5 to version 5.5.6.5190 or later.
Added: Feb 11, 2026, 1:25 PM
Updated: Feb 11, 2026, 4:10 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
5.2remediation
0.0relevance
2.7threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.