Resource Allocation Vulnerability in File Station by QNAP
CVE-2025-54155

3.6LOW

Key Information:

Vendor

QNAP
Status
File Station 5
Vendor
CVE Published:
11 February 2026

What is CVE-2025-54155?

A resource allocation vulnerability has been identified in QNAP's File Station 5, where insufficient limits or throttling can allow an authenticated remote attacker with admin privileges to exploit this flaw. By compromising the allocation of resources, the attacker could disrupt access for other systems, applications, or processes relying on the same resources, presenting significant operational risks. Users are urged to upgrade to version 5.5.6.5018 or later to mitigate these risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

File Station 5 5.5.x < 5.5.6.5018

References

https://www.qnap.com/en/security-advisory/qsa-26-03

CVSS V4

Score:
3.6
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

coral
JSON
.