CVE-2026-24724

An incorrect authorization vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass intended access restrictions. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.qnap.com/en/security-advisory/qsa-26-10

Configurations

Configuration 1 (hide)

cpe:2.3:a:qnap:file_station:*:*:*:*:*:*:*:*

History

23 Jul 2026, 09:10

Type	Values Removed	Values Added
Summary		(es) Se ha reportado una vulnerabilidad de autorización incorrecta que afecta a File Station 6. Si un atacante remoto obtiene una cuenta de usuario, puede entonces explotar la vulnerabilidad para eludir las restricciones de acceso previstas. Ya hemos corregido la vulnerabilidad en la siguiente versión: File Station 5 5.5.6.5243 y posteriores

17 Jun 2026, 13:20

Type	Values Removed	Values Added
References	~~{'url': 'https://www.qnap.com/en/security-advisory/qsa-26-29', 'tags': ['Broken Link'], 'source': 'security@qnapsecurity.com.tw'}~~	() https://www.qnap.com/en/security-advisory/qsa-26-10 -

12 Jun 2026, 13:47

Type	Values Removed	Values Added
First Time		Qnap file Station Qnap
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 8.1
References	~~() https://www.qnap.com/en/security-advisory/qsa-26-29 -~~	() https://www.qnap.com/en/security-advisory/qsa-26-29 - Broken Link
CPE		cpe:2.3:a:qnap:file_station::::::::

10 Jun 2026, 04:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-06-10 04:17

Updated : 2026-07-23 09:10

NVD link : CVE-2026-24724

Mitre link : CVE-2026-24724

CVE.ORG link : CVE-2026-24724

JSON object : View

Products Affected

qnap

file_station

CWE

CWE-863

Incorrect Authorization

{"id": "CVE-2026-24724", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-24724", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-10T15:09:18.305756Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.8}], "cvssMetricV40": [{"type": "Secondary", "source": "security@qnapsecurity.com.tw", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.2, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "UNREPORTED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "security@qnapsecurity.com.tw", "affectedData": [{"vendor": "QNAP Systems Inc.", "product": "File Station 5", "versions": [{"status": "affected", "version": "5.5.0", "lessThan": "5.5.6.5243", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-06-10T04:17:17.253", "references": [{"url": "https://www.qnap.com/en/security-advisory/qsa-26-10", "source": "security@qnapsecurity.com.tw"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security@qnapsecurity.com.tw", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "An incorrect authorization vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass intended access restrictions.\n\nWe have already fixed the vulnerability in the following version:\nFile Station 5 5.5.6.5243 and later"}, {"lang": "es", "value": "Se ha reportado una vulnerabilidad de autorizaci\u00f3n incorrecta que afecta a File Station 6. Si un atacante remoto obtiene una cuenta de usuario, puede entonces explotar la vulnerabilidad para eludir las restricciones de acceso previstas.\n\nYa hemos corregido la vulnerabilidad en la siguiente versi\u00f3n:\nFile Station 5 5.5.6.5243 y posteriores"}], "lastModified": "2026-07-23T09:10:00.113", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:qnap:file_station:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93B729A0-2E61-4873-9039-4EF08448BD6F", "versionEndExcluding": "5.5.6.5243", "versionStartIncluding": "5.5.6.4691"}], "operator": "OR"}]}], "sourceIdentifier": "security@qnapsecurity.com.tw"}