CVE-2026-26239General(qnap / file_station)

LOWCVSS 8.1 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A buffer overflow vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5208 and later

qnap CVEs Back to dashboard

1.5/ 10 priority

Sources & remediation

Other references

https://www.qnap.com/en/security-advisory/qsa-26-10

Weakness type (CWE)

CWE-121

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

file_station

Threat summary

Public PoC is present in monitored signal
4 mentions across 3 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Technical details provided in 4 signals
General: 2 classified signals
Disclosure: 1 classified signal
Peaked 2d ago at 2 mentions (2026-06-10); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

qnap

Products

file_station

Deep dive

Activity timeline4 mentions / 3d

Signal classification3 categories

General

250.0%

Disclosure

125.0%

PoC

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-10	2	Disclosure1General1
2026-06-16	1	General1
2026-07-22	1	PoC1

Full discourse4 posts

Matthias Deeg@matthiasdeeg96d
PoC
We have also created a proof-of-concept video demonstrating arbitrary file deletion, arbitrary file read, and remote code execution by exploiting the corresponding security vulnerabilities CVE-2026-26239, CVE-2026-26240, and CVE-2026-26241. https://www.youtube.com/watch?v=_6Pwdss-8cQ
Post summary
The post announces a proof‑of‑concept video that demonstrates exploitation of CVE-2026-26239, CVE-2026-26240, and CVE-2026-26241, showing arbitrary file deletion, read, and remote code execution, without referencing patches or active attacks.
02085883
593 followersView on X
ゆぅさん@YY20424277132d
General
【3軸解説】「QNAP SystemsのFile Station 5におけるスタックベースのバッファオーバーフローの脆弱性（CVE-2026-26239）」を、背景 / 目的 / 効果の 3 軸で読み解きます。背景/目的/効果の3軸で読み解きました。 #セキュリティ #若手コンサル ▶ 無料ツール WR-Analysis: https://www.intect-i.jp/tools/wr-analysis/
Post summary
The article offers a high‑level discussion of CVE‑2026‑26239, a stack‑based buffer overflow in QNAP File Station 5, covering its background, purpose, and impact, but it does not include a PoC, exploit, remediation, or evidence of active attacks.
0000069
860 followersView on X
Infoflowcloud@infoflowcloud138d
Disclosure
🚨*CVE* CVE-2026-26239 A buffer overflow vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to modi… https://www.cve.org/CVERecord?id=CVE-2026-26239 ----- Traducción: CVE-2026-26239 Se … http://infoflow.cloud`
Post summary
The tweet announces CVE-2026-26239 as a buffer overflow affecting File Station 5, providing no PoC, patch, or exploitation details.
0000025
79 followersView on X
CVE@CVEnew138d
General
CVE-2026-26239 A buffer overflow vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to modi… https://www.cve.org/CVERecord?id=CVE-2026-26239
Post summary
The post briefly announces a buffer overflow vulnerability (CVE‑2026‑26239) affecting File Station 5 with no PoC, exploit code, or patch information provided.
00000246
57.6K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	qnap	file_station	-	-	-

Explore more

Back to dashboard qnap CVEs file_station vulnerabilities

What researchers are saying

CVE-2026-26239

ゆぅさん[verified]@YY20424277General

The article offers a high‑level discussion of CVE‑2026‑26239, a stack‑based buffer overflow in QNAP File Station 5, covering its background, purpose, and impact, but it does not include a PoC, exploit, remediation, or evidence of active attacks.

Matthias Deeg@matthiasdeegPoC

The post announces a proof‑of‑concept video that demonstrates exploitation of CVE-2026-26239, CVE-2026-26240, and CVE-2026-26241, showing arbitrary file deletion, read, and remote code execution, without referencing patches or active attacks.

Infoflowcloud@infoflowcloudDisclosure

The tweet announces CVE-2026-26239 as a buffer overflow affecting File Station 5, providing no PoC, patch, or exploitation details.

CVE@CVEnewGeneral

The post briefly announces a buffer overflow vulnerability (CVE‑2026‑26239) affecting File Station 5 with no PoC, exploit code, or patch information provided.