Cross-Site Scripting Vulnerability in File Station 5 by QNAP
CVE-2025-57706

2.2LOW

Key Information:

Vendor

QNAP
Status
File Station 5
Vendor
CVE Published:
7 November 2025

What is CVE-2025-57706?

A cross-site scripting (XSS) vulnerability has been identified in QNAP's File Station 5, allowing remote attackers who have user account access to exploit this weakness. Attackers can potentially bypass established security measures and gain unauthorized access to sensitive application data. QNAP has addressed this vulnerability in version 5.5.6.5018 and later, emphasizing the importance of keeping software up to date to mitigate risks.

Affected Version(s)

File Station 5 5.5.x < 5.5.6.5018

References

https://www.qnap.com/en/security-advisory/qsa-25-38

CVSS V4

Score:
2.2
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Engin AydoÄźan
JSON
.
CVE-2025-57706 : Cross-Site Scripting Vulnerability in File Station 5 by QNAP