Notes Station 3 (Qnap Systems Inc.) - vulnerabilities (CVEs)
10 CVEs, 4 in the last 30 days, 2 known versions, newest CVE from 2026-10-15. Vendor: Qnap Systems Inc..
CVEs of Notes Station 3
- CVE-2026-39991 - CVSS 4.8 (medium), 2026-10-15: A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If a remote attacker gains a user account, they can then exploit the…
- CVE-2026-34009 - CVSS 8.4 (high), 2026-10-15: An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local attacker gains an administrator account,…
- CVE-2026-34008 - CVSS 8.5 (high), 2026-10-15: An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If a local attacker gains a user account,…
- CVE-2026-34007 - CVSS 6.9 (medium), 2026-10-15: An OS command injection vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote attackers to execute…
- CVE-2024-38646 - CVSS 8.4 (high), 2024-11-22: An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could…
- CVE-2024-38645 - CVSS 9.4 (critical), 2024-11-22: A server-side request forgery (SSRF) vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote…
- CVE-2024-38644 - CVSS 8.8 (high), 2024-11-22: An OS command injection vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote authenticated attackers…
- CVE-2024-38643 - CVSS 9.8 (critical), 2024-11-22: A missing authentication for critical function vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote…
- CVE-2024-27126 - CVSS 6.3 (medium), 2024-09-06: A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow authenticated users to…
- CVE-2024-27122 - CVSS 6.3 (medium), 2024-09-06: A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow authenticated users to…
