Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
1.2

File Station 5: Unauthorized Admin Access to Crash Service

CVE-2025-54163 · published 8 months ago
Summary

A security issue in File Station 5 allows hackers to crash the service if they have an administrator account. This could be used to disrupt your business operations. Update to File Station 5 5.5.6.5166 or later to fix the issue.

What to do
  • Update qnap file_station to version 5.5.6.5190 or later.
Affected software
VendorProductAffected versions
qnap file_station >= 5.5.6.4691, < 5.5.6.5190
cpe:2.3:a:qnap:file_station:*:*:*:*:*:*:*:*
Original advisory text
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-...
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.

We have already fixed the vulnerability in the following version:
File Station 5 5.5.6.5166 and later
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
1.2 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-476NULL Pointer Dereference
Timeline
Published11 Feb 2026
Updated4 Nov 2026
First seen6 Mar 2026
Sources
CVE-2025-54163 · NVD
Track software like this
Free during beta