Video Station (Qnap) - vulnerabilities (CVEs)

21 CVEs, 6 in the last 30 days, 70 known versions, newest CVE from 2026-10-15. Vendor: Qnap.

CVEs of Video Station

CVE-2026-44084 - CVSS 8.7 (high), 2026-10-15: An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow…
CVE-2026-34015 - CVSS 8.7 (high), 2026-10-15: A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability…
CVE-2026-26245 - CVSS 8.8 (high), 2026-10-15: A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to…
CVE-2026-26244 - CVSS 8.8 (high), 2026-10-15: A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to…
CVE-2025-66275 - CVSS 7.7 (high), 2026-10-15: A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability…
CVE-2025-66272 - CVSS 7.7 (high), 2026-10-15: A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability…
CVE-2024-14025 - CVSS 6.7 (medium), 2026-03-11: An SQL injection vulnerability has been reported to affect Video Station. If an attacker gains local network access who have also gained an administrator…
CVE-2024-14024 - CVSS 6.7 (medium), 2026-03-11: An improper certificate validation vulnerability has been reported to affect Video Station. If an attacker gains local network access who have also gained an…
CVE-2024-56804 - CVSS 8.8 (high), 2025-10-03: An SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability…
CVE-2023-47563 - CVSS 8.8 (high), 2024-09-06: An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to execute…
CVE-2023-50360 - CVSS 8.8 (high), 2024-09-06: A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious…
CVE-2023-41288 - CVSS 8.8 (high), 2024-01-05: An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow users to execute commands via a…
CVE-2023-41287 - CVSS 8.8 (high), 2024-01-05: A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow users to inject malicious code via a…
CVE-2023-34976 - CVSS 10 (critical), 2023-10-13: A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious…
CVE-2023-34975 - CVSS 8.8 (high), 2023-10-13: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow…
CVE-2023-34977 - CVSS 5.4 (medium), 2023-10-13: A cross-site scripting (XSS) vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to…
CVE-2021-44055 - CVSS 9.8 (critical), 2022-05-05: An missing authorization vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows remote attackers…
CVE-2021-44056 - CVSS 9.8 (critical), 2022-05-05: An improper authentication vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows attackers to…
CVE-2021-28812 - CVSS 8.8 (high), 2021-06-03: A command injection vulnerability has been reported to affect certain versions of Video Station. If exploited, this vulnerability allows remote attackers to…
CVE-2019-7184 - CVSS 4.8 (medium), 2019-12-05: This cross-site scripting (XSS) vulnerability in Video Station allows remote attackers to inject and execute scripts on the administrator’s management…
CVE-2017-13071 - CVSS 9.8 (critical), 2017-11-22: QNAP has already patched this vulnerability. This security concern allows a remote attacker to run arbitrary commands on the QNAP Video Station 5.1.3 (for QTS…