PT-2026-48369 · Synology · File Station

Coral · Published 2026-06-10 · Updated 2026-06-10 · CVE-2026-24720

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions File Station versions prior to 5.5.6.5243

Description An issue exists where resources are allocated without limits or throttling. A remote attacker with a user account can exploit this to prevent other systems, applications, or processes from accessing the same type of resource.

Recommendations Update to version 5.5.6.5243 or later.

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2026-24720

Affected Products

File Station

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-24720 · Security Note
• https://twitter.com/VulmonFeeds/status/2064577041853288876 · Twitter Post
• https://qnap.com/en/security-advisory/qsa-26-26 · Note