Path Traversal Vulnerability in Video Station by QNAP

CVE-2025-66272

What is CVE-2025-66272?

A path traversal vulnerability has been identified in Video Station, allowing remote attackers who gain access to valid user accounts to exploit the system. This exploitation enables them to read unintended files and system data, potentially compromising sensitive information. A patch has been issued in Video Station version 5.8.5 and later to mitigate this risk.

References