VulnSocial

CVE-2026-22899Disclosure(qnap / file_station)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch qnap file_station systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A NULL pointer dereference vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5208 and later

qnap CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-476

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • file_station

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-06-10); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
qnap
Products
file_station

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-06-10: 1Mentions · 2026-06-26: 1Mentions · 2026-06-29: 1Patch / Workaround · 2026-06-29: 1Technical Details · 2026-06-10: 1Technical Details · 2026-06-26: 1Technical Details · 2026-06-29: 106-1006-2606-29
Signal classification3 categories
Disclosure
133.3%
General
133.3%
Patch
133.3%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-06-101
Disclosure1
2026-06-261
General1
2026-06-291
Patch1
Full discourse3 posts
  • iototsecnews@iototsecnews
    Patch

    QNAP NAS 製品群の複数の深刻な脆弱性が FIX：認証情報窃取や DoS などの恐れ https://iototsecnews.jp/2026/06/22/qnap-fixes-14-vulnerabilities-in-qts-quts-hero-quts-cloud-and-qvp/ 今回の QNAP のアドバイザリは、URL インジェクションの欠陥 CVE-2025-59382 や、入力サニタイズの不備によるコマンド・インジェクション CVE-2025-66273／CVE-2025-66279 などに対処するものです。また、メモリ処理の不適切な取り扱いから生じるバッファ・オーバーフロー CVE-2026-26241／NULL ポインタ逆参照 CVE-2026-22899／アクセス制御の不備も修正されています。ご利用のチームは、ご注意ください。 #CVE202559382 #CVE202562858 #CVE202566273 #CVE202566279 #CVE202566280 #CVE202566281 #CVE202568405 #CVE202622893 #CVE202622899 #CVE202624720 #CVE202624724 #CVE202626239 #CVE202626240 #CVE202626241 #NAS #QNAP #Vulnerability

    Post summary

    QNAP released a patch addressing several critical vulnerabilities (URL injection, command injection, buffer overflow, null pointer dereference) with no indication of active exploitation or PoC details.

    01000163
    500 followersView on X
  • BREACHSPIDER@breachspider
    General

    [CVE Analysis] CVE-2026-22899: Authenticated NULL Pointer DoS in File Station 6 and the OT File Transfer Blind Spot https://breachspider.com/intel/2026-06-26-cve-2026-22899-authenticated-null-pointer-dos-in-file-statio #ICS #OTSecurity #SCADA #CriticalInfrastructure

    Post summary

    The post announces CVE‑2026‑22899, noting an authenticated NULL‑pointer denial‑of‑service flaw in File Station 6 and OT file transfer, but provides no PoC, exploit, patch, or evidence of active exploitation.

    0000069
    2.3K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-22899 Denial-of-Service via NULL Pointer Dereference in Synology File S... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-22899 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4

    Post summary

    The tweet announces CVE-2026-22899 as a denial‑of‑service flaw in Synology File Services, linking to a vulnerability detail page but providing no PoC, exploit, or patch information.

    0000077
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appqnapfile_station---

Explore more

Back to dashboardqnap CVEsfile_station vulnerabilities