CVE-2026-24720

Katalog CVE

CVSS 6.5 · Medium EPSS 0,38%

Kerentanan Allocation of Resources Without Limits or Throttling pada qnap file station. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later

Rincian

Terbit di NVD

10 Juni 2026

Terakhir diubah

23 Juli 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-770: Allocation of Resources Without Limits or Throttling

EPSS (30 hari)

0,38% peluang dieksploitasi; lebih tinggi dari 30,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.qnap.com/en/security-advisory/qsa-26-10