NULL Pointer Dereference Vulnerability in File Station by QNAP

CVE-2025-29878

What is CVE-2025-29878?

A NULL pointer dereference vulnerability exists in File Station 5, allowing remote attackers with user accounts to exploit this weakness. When successfully exploited, this vulnerability can lead to a denial-of-service (DoS) attack, disrupting the normal operation of the service. The problem has been addressed in version 5.5.6.4907 and later, providing necessary protections against such attacks.

References