NULL Pointer Dereference Vulnerability in File Station by QNAP

CVE-2025-29889

What is CVE-2025-29889?

A NULL pointer dereference vulnerability has been identified in File Station 5, allowing remote attackers with user account access to exploit the flaw. This exploitation could potentially lead to a denial-of-service (DoS) attack, compromising the application's availability. To mitigate this issue, users are advised to upgrade to File Station version 5.5.6.4907 or later, where the vulnerability has been patched.

References