Path Traversal Vulnerability in QNAP Video Station

CVE-2025-66275

What is CVE-2025-66275?

A path traversal vulnerability affecting QNAP's Video Station has been identified, allowing remote attackers who possess a valid user account to exploit this issue. By doing so, they can gain unauthorized access to sensitive files and system data, potentially leading to further security risks. The vulnerability has been addressed in Video Station version 5.8.5 and later, underscoring the importance of keeping applications updated to ensure robust security.

References