PT-2026-114805 · Qnap Systems · Video Station

·

CVE-2025-66272

·

Publicado

2026-10-15

·

Atualizado

2026-10-15

CVSS v4.0

7.7

Alta

VetorAV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data.
We have already fixed the vulnerability in the following version: Video Station 5.8.5 and later

Correção

Path traversal

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2025-66272

Produtos afetados

Video Station