CVE-2026-26241Disclosure(qnap / file_station)

LOWCVSS 9.1 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch qnap file_station systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later

qnap CVEs Back to dashboard

2.0/ 10 priority

Sources & remediation

Other references

https://www.qnap.com/en/security-advisory/qsa-26-10

Weakness type (CWE)

CWE-121

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

file_station

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
6 mentions across 4 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 6 signals
Disclosure: 4 classified signals
Peaked 3d ago at 3 mentions (2026-06-10); latest day: 1
6 total mentions across 4 days

Affected systems

Vendors

qnap

Products

file_station

Deep dive

Activity timeline6 mentions / 4d

Signal classification3 categories

Disclosure

466.7%

Patch

116.7%

PoC

116.7%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-10	3	Disclosure3
2026-06-25	1	Disclosure1
2026-06-29	1	Patch1
2026-07-22	1	PoC1

Full discourse6 posts

Matthias Deeg@matthiasdeeg94d
PoC
We have also created a proof-of-concept video demonstrating arbitrary file deletion, arbitrary file read, and remote code execution by exploiting the corresponding security vulnerabilities CVE-2026-26239, CVE-2026-26240, and CVE-2026-26241. https://www.youtube.com/watch?v=_6Pwdss-8cQ
Post summary
A proof‑of‑concept video is shared demonstrating file deletion, read, and RCE for CVE‑2026‑26239‑41, but no exploit code, patch, or evidence of active exploitation is provided.
02085883
593 followersView on X
iototsecnews@iototsecnews117d
Patch
QNAP NAS 製品群の複数の深刻な脆弱性が FIX：認証情報窃取や DoS などの恐れ https://iototsecnews.jp/2026/06/22/qnap-fixes-14-vulnerabilities-in-qts-quts-hero-quts-cloud-and-qvp/ 今回の QNAP のアドバイザリは、URL インジェクションの欠陥 CVE-2025-59382 や、入力サニタイズの不備によるコマンド・インジェクション CVE-2025-66273／CVE-2025-66279 などに対処するものです。また、メモリ処理の不適切な取り扱いから生じるバッファ・オーバーフロー CVE-2026-26241／NULL ポインタ逆参照 CVE-2026-22899／アクセス制御の不備も修正されています。ご利用のチームは、ご注意ください。 #CVE202559382 #CVE202562858 #CVE202566273 #CVE202566279 #CVE202566280 #CVE202566281 #CVE202568405 #CVE202622893 #CVE202622899 #CVE202624720 #CVE202624724 #CVE202626239 #CVE202626240 #CVE202626241 #NAS #QNAP #Vulnerability
Post summary
The advisory announces that QNAP has released patches for several critical vulnerabilities across its NAS product line, addressing issues such as URL injection, command injection, buffer overflows, and access control flaws.
01000163
500 followersView on X
BREACHSPIDER@breachspider121d
Disclosure
[CVE Analysis] CVE-2026-26241: Buffer Overflow in QNAP File Station 5 Exposes OT File Transfer Pathways https://breachspider.com/intel/2026-06-25-cve-2026-26241-buffer-overflow-in-qnap-file-station-5-expose #ICS #OTSecurity #SCADA #CriticalInfrastructure
Post summary
The post announces a buffer‑overflow vulnerability in QNAP File Station 5 that could expose OT file transfer pathways, yet it provides no exploit, PoC, or patch details.
0000076
2.3K followersView on X
Infoflowcloud@infoflowcloud136d
Disclosure
🚨*CVE* CVE-2026-26241 A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processe… https://www.cve.org/CVERecord?id=CVE-2026-26241 ----- Traducción: CVE-2026-26241 Se … http://infoflow.cloud`
Post summary
The announcement identifies CVE-2026-26241 as a buffer overflow in File Station 5, but no PoC, exploit, or patch details are provided.
0000023
79 followersView on X
CVE@CVEnew136d
Disclosure
CVE-2026-26241 A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processe… https://www.cve.org/CVERecord?id=CVE-2026-26241
Post summary
CVE-2026-26241 is a buffer overflow vulnerability in ShareFile Station 5 that can be remotely exploited to modify memory or crash the process.
00000204
57.6K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds136d
Disclosure
CVE-2026-26241 Buffer Overflow Vulnerability in Synology File Station 5 Before 5.5.6.5243 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26241
Post summary
A brief post announces a buffer overflow in Synology File Station 5 before 5.5.6.5243, without mention of PoC, exploit code, patch, or active exploitation.
0000061
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	qnap	file_station	-	-	-

Explore more

Back to dashboard qnap CVEs file_station vulnerabilities

What researchers are saying

CVE-2026-26241

Matthias Deeg@matthiasdeegPoC

A proof‑of‑concept video is shared demonstrating file deletion, read, and RCE for CVE‑2026‑26239‑41, but no exploit code, patch, or evidence of active exploitation is provided.

iototsecnews@iototsecnewsPatch

The advisory announces that QNAP has released patches for several critical vulnerabilities across its NAS product line, addressing issues such as URL injection, command injection, buffer overflows, and access control flaws.

BREACHSPIDER@breachspiderDisclosure

The post announces a buffer‑overflow vulnerability in QNAP File Station 5 that could expose OT file transfer pathways, yet it provides no exploit, PoC, or patch details.

Infoflowcloud@infoflowcloudDisclosure

The announcement identifies CVE-2026-26241 as a buffer overflow in File Station 5, but no PoC, exploit, or patch details are provided.

CVE@CVEnewDisclosure

CVE-2026-26241 is a buffer overflow vulnerability in ShareFile Station 5 that can be remotely exploited to modify memory or crash the process.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A brief post announces a buffer overflow in Synology File Station 5 before 5.5.6.5243, without mention of PoC, exploit code, patch, or active exploitation.