QNAP Systems Inc. Video Station
18 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-44084 | 5.8.x – < 5.8.8 | Access Code Forgery in Video Station leading to unauthorized media access | HIGH 8.7 | 0.3 % | ||
| CVE-2026-34015 | 5.8.x – < 5.8.8 | Remote Code Execution in upload.php of Video Station | HIGH 8.7 | 0.4 % | ||
| CVE-2026-26245 | 5.8.x – < 5.8.8 | SQLi#2 SQL Injection in class_videos.php getSmartVideosByOffset | HIGH 7.1 | 0.4 % | ||
| CVE-2026-26244 | 5.8.x – < 5.8.8 | SQLi#1 SQL Injection in class_videos.php _getFilters | HIGH 7.1 | 0.4 % | ||
| CVE-2025-66275 | 5.8.x – < 5.8.5 | Remote code execution via command injection | HIGH 7.7 | 0.4 % | ||
| CVE-2025-66272 | 5.8.x – < 5.8.5 | Arbitrary file deletion and remote code execution | HIGH 7.7 | 0.4 % | ||
| CVE-2024-14025 | 5.8.x – < 5.8.2 | Video Station | LOW 0.1 | 0.1 % | ||
| CVE-2024-14024 | 5.8.x – < 5.8.2 | Video Station | LOW 0.1 | 0.1 % | ||
| CVE-2024-56804 | 5.8.x – < 5.8.4 | Video Station | MEDIUM 5.3 | 0.4 % | ||
| CVE-2023-50360 | 5.8.x – < 5.8.1 ( 2024/02/26 ) | Video Station | HIGH 8.8 | 0.4 % | ||
| CVE-2023-47563 | 5.8.x – < 5.8.2 | Video Station | HIGH 8.8 | 1.0 % | ||
| CVE-2023-41287 | 5.7.x – < 5.7.2 ( 2023/11/23 ) | Video Station | HIGH 8.8 | 0.5 % | ||
| CVE-2023-41288 | 5.7.x – < 5.7.2 ( 2023/11/23 ) | Video Station | HIGH 8.8 | 1.1 % | ||
| CVE-2023-34977 | 5.7.x – < 5.7.0 ( 2023/07/27 ) | Video Station | MEDIUM 5.4 | 0.3 % | ||
| CVE-2023-34976 | 5.7.x – < 5.7.0 ( 2023/07/27 ) | Video Station | CRITICAL 10.0 | 0.6 % | ||
| CVE-2021-44056 | unspecified – < 5.5.9 ; unspecified – < 5.3.13 ; unspecified – < 5.1.8 | Improper authentication in Video Station | CRITICAL 9.8 | 0.9 % | ||
| CVE-2021-44055 | unspecified – < 5.5.9 ( 2022/02/16 ) | Information leakage in Video Station | CRITICAL 9.8 | 1.1 % | ||
| CVE-2021-28812 | unspecified – < 5.5.4 | Command Injection Vulnerability in Video Station | HIGH 8.8 | 1.6 % |