High severity8.8NVD Advisory· Published Oct 3, 2025· Updated Jun 17, 2026
CVE-2024-56804
CVE-2024-56804
Description
An SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands.
We have already fixed the vulnerability in the following version: Video Station 5.8.4 and later
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:qnap:video_station:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:qnap:video_station:*:*:*:*:*:*:*:*range: >=5.8.0,<5.8.4
- (no CPE)range: >=5.8.4
- Range: 5.8.x
Patches
Vulnerability mechanics
References
1- www.qnap.com/en/security-advisory/qsa-25-32nvdVendor Advisory
News mentions
0No linked articles in our index yet.