PT-2026-48377 · Synology · File Station

Published 2026-06-10 · Updated 2026-06-10 · CVE-2026-26241

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions File Station 5 versions prior to 5.5.6.5243

Description A buffer overflow occurs, which is a condition where a program writes more data to a block of memory than it is allocated to hold. Remote attackers can exploit this issue to modify memory or cause processes to crash.

Recommendations Update to version 5.5.6.5243 or later.

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2026-26241

Affected Products

File Station

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-26241 · Security Note
• https://qnap.com/en/security-advisory/qsa-26-27 · Note
• https://twitter.com/VulmonFeeds/status/2064584724815782327 · Twitter Post