Unrated severityNVD Advisory· Published Nov 7, 2025· Updated Nov 7, 2025
File Station 5
CVE-2025-57706
Description
A cross-site scripting (XSS) vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data.
We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5018 and later
Affected products
2- Range: <5.5.6.5018
- QNAP Systems Inc./File Station 5v5Range: 5.5.x
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.