takenaka hiroya@Joe_Biden_ja
QNAP Video StationにSQLインジェクション(CVE-2026-26244、CVSS 8.8)。5.8.0以上5.8.8未満が対象で、修正版は5.8.8です。NAS管理者は更新を。 https://ai-news.autoarticles.net/article/post_1792377769890_wteezs
0000025
558 followersView on X
CVE-2026-26244(qnap / video_station)
LOWCVSS 8.8 · HIGHSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.8 and later
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-89
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- video_station
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day
Affected systems
Vendors
Products
video_station
Deep dive
Activity timeline1 mentions / 1d
Referenced assets1 URL
Full discourse1 post
CPE platform detail1 entries
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | qnap | video_station | - | - | - |