Advisories · Technology

QNAP Systems Inc. Video Station.

Every CVE that names QNAP Systems Inc. Video Station among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-44084 CVE record

CVSS 8.7 High

Access Code Forgery in Video Station leading to unauthorized media access
- QNAP Systems Inc. Video Station
- Broken access control
Not analysed yet 15 Oct 2026
CVE-2026-34015 CVE record

CVSS 8.7 High

Remote Code Execution in upload.php of Video Station
- QNAP Systems Inc. Video Station
- Path traversal
Not analysed yet 15 Oct 2026
CVE-2026-26245 CVE record

CVSS 7.1 High

SQLi#2 SQL Injection in class_videos.php getSmartVideosByOffset
- QNAP Systems Inc. Video Station
- SQL injection
Not analysed yet 15 Oct 2026
CVE-2026-26244 CVE record

CVSS 7.1 High

SQLi#1 SQL Injection in class_videos.php _getFilters
- QNAP Systems Inc. Video Station
- SQL injection
Not analysed yet 15 Oct 2026
CVE-2025-66275 CVE record

CVSS 7.7 High

Remote code execution via command injection
- QNAP Systems Inc. Video Station
- Path traversal
Not analysed yet 15 Oct 2026
CVE-2025-66272 CVE record

CVSS 7.7 High

Arbitrary file deletion and remote code execution
- QNAP Systems Inc. Video Station
- Path traversal
Not analysed yet 15 Oct 2026
CVE-2024-14025 CVE record

CVSS 0.1 Low

Video Station
- QNAP Systems Inc. Video Station
- SQL injection
Not analysed yet 11 Mar 2026
CVE-2024-14024 CVE record

CVSS 0.1 Low

Video Station
- QNAP Systems Inc. Video Station
- Weak cryptography or TLS
Not analysed yet 11 Mar 2026
CVE-2024-56804 CVE record

CVSS 5.3 Medium

Video Station
- QNAP Systems Inc. Video Station
- SQL injection
Not analysed yet 3 Oct 2025
CVE-2023-50360 CVE record

CVSS 8.8 High

Video Station
- QNAP Systems Inc. Video Station
- SQL injection
Not analysed yet 6 Sept 2024
CVE-2023-47563 CVE record

CVSS 7.4 High

Video Station
- QNAP Systems Inc. Video Station
- Command injection
Not analysed yet 6 Sept 2024
CVE-2023-41287 CVE record

CVSS 4.3 Medium

Video Station
- QNAP Systems Inc. Video Station
- SQL injection
Not analysed yet 5 Jan 2024
CVE-2023-41288 CVE record

CVSS 8.8 High

Video Station
- QNAP Systems Inc. Video Station
- Command injection
Not analysed yet 5 Jan 2024
CVE-2023-34977 CVE record

CVSS 4.6 Medium

Video Station
- QNAP Systems Inc. Video Station
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2023
CVE-2023-34976 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Video Station
- QNAP Systems Inc. Video Station
- SQL injection
Not analysed yet 13 Oct 2023
CVE-2021-44056 CVE record

CVSS 7.1 High

Improper authentication in Video Station
- QNAP Systems Inc. Video Station
- Authentication bypass
Not analysed yet 5 May 2022
CVE-2021-44055 CVE record

CVSS 5.3 Medium

Information leakage in Video Station
- QNAP Systems Inc. Video Station
- Broken access control
Not analysed yet 5 May 2022
CVE-2021-28812 CVE record

CVSS 8.8 High

Command Injection Vulnerability in Video Station
- QNAP Systems Inc. Video Station
- Command injection
- CWE-1286
Not analysed yet 3 Jun 2021