Advisories · Technology

QNAP Systems Inc. HybridDesk Station.

Every CVE that names QNAP Systems Inc. HybridDesk Station among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-47786 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Pre-Authentication Command Injection
- QNAP Systems Inc. HybridDesk Station
- Command injection
Not analysed yet 15 Oct 2026
CVE-2026-39997 CVE record

CVSS 8.9 High

Unauthenticated Remote Input Injection in QNAP HD Station's remotepad
- QNAP Systems Inc. HybridDesk Station
- Authentication bypass
Not analysed yet 15 Oct 2026
CVE-2025-44015 CVE record

CVSS 2.3 Low

HybridDesk Station
- QNAP Systems Inc. HybridDesk Station
- Command injection
Not analysed yet 29 Aug 2025