DS
Product
Download Station
4
CVEs
0
On KEV
8.7
Max CVSS
3
New 30D
Severity mix
Critical 0High 2Medium 2Low 0
Watch
Add Download Station to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-39993 | 8.7 | Oct 15 | Path Traversal to Root RCE in QNAP Download Station via Addon/Search addon Parameter Affected: 5.10.x before 5.10.2.313; 5.11.x before 5.11.3.322 |
| CVE-2026-34014 | 8.4 | Oct 15 | ds-move-files.sh is writable and executed as root Affected: 5.10.x before 5.10.1.312; 5.11.x before 5.11.2.321 |
| CVE-2024-38640 | 5.4 | Sep 6 | Download Station Affected: 5.8.x before 5.8.6.283 ( 2024/06/21 ) |
| CVE-2026-39989 | 5.3 | Oct 15 | SSRF in QNAP Download Station Affected: 5.10.x before 5.10.1.312; 5.11.x before 5.11.2.321 |
Showing 4