QNAP Systems Inc. HybridDesk Station

3 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-477864.2.x – < 4.2.23 ; 4.3.x – < 4.3.4Pre-Authentication Command InjectionCRITICAL 9.31.1 %
CVE-2026-399974.2.x – < 4.2.22Unauthenticated Remote Input Injection in QNAP HD Station's remotepadHIGH 8.90.2 %
CVE-2025-440154.2.x – < 4.2.18HybridDesk StationLOW 2.30.9 %