Unrated severityNVD Advisory· Published Feb 11, 2026· Updated Feb 11, 2026
File Station 5
CVE-2025-57707
Description
An improper neutralization of directives in statically saved code ('Static Code Injection') vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to access restricted data / files.
We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5166 and later
Affected products
1- QNAP Systems Inc./File Station 5v5Range: 5.5.x
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.