NULL Pointer Dereference in QNAP File Station 5

CVE-2026-24723

What is CVE-2026-24723?

A vulnerability exists in QNAP's File Station 5, where improper handling of pointers can lead to a NULL pointer dereference. This flaw allows remote attackers, with valid user accounts, to exploit the issue, potentially causing a denial-of-service (DoS) situation by disrupting services for legitimate users. The vulnerability has been addressed in versions 5.5.6.5243 and later, making immediate updates essential for maintaining system integrity and availability.

References