Path Traversal Vulnerability in File Station 5 by QNAP
CVE-2025-66278

1.3LOW

Key Information:

Vendor

QNAP
Status
File Station 5
Vendor
CVE Published:
11 February 2026

What is CVE-2025-66278?

A vulnerability classified as path traversal has been identified in File Station 5 by QNAP. This security flaw allows a remote attacker with a valid user account to navigate the file system and potentially access sensitive files or system data that are not intended to be exposed. To mitigate this risk, it is crucial for users to update to File Station 5 version 5.5.6.5190 or later, where the vulnerability has been addressed. Protect your system by ensuring you're operating on the most recent version.

Affected Version(s)

File Station 5 5.5.x < 5.5.6.5190

References

https://www.qnap.com/en/security-advisory/qsa-26-03

CVSS V4

Score:
1.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

coral
.