Critical severity9.8NVD Advisory· Published Nov 2, 2020· Updated Jun 17, 2026

CVE-2018-19950

Description

If exploited, this command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.1.13; versions prior to 5.2.9; versions prior to 5.3.11.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Qnap/Music Station
cpe:2.3:a:qnap:music_station:*:*:*:*:*:*:*:*
Range: >=5.3.0,<5.3.11
QNAP Systems Inc./Music Stationllm-fuzzy
Range: <5.1.13, <5.2.9, <5.3.11
QNAP Systems Inc./Music Stationv5
Range: unspecified

Patches

Vulnerability mechanics

References

www.qnap.com/en/security-advisory/qsa-20-10nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000