
QNAP Video Station patch fixes high-severity path traversal flaw for NAS users
QNAP has released Video Station 5.8.8 to address CVE-2026-34015, a high-severity vulnerability that allows authenticated attackers to access sensitive system data.
Everything Patch Observer has reported about QNAP: 4 stories, newest first. Part of our Vulnerabilities coverage.

QNAP has released Video Station 5.8.8 to address CVE-2026-34015, a high-severity vulnerability that allows authenticated attackers to access sensitive system data.

QNAP released QuMagie 2.9.1 to address CVE-2026-41545, a high-severity path traversal issue allowing authenticated attackers to read sensitive system files.

QNAP releases Video Station 5.8.8 to fix CVE-2026-44084, an authorization bypass allowing remote attackers to access sensitive data on affected NAS devices.

Users of QNAP Notes Station 3 must upgrade to version 3.9.11 to address a high-severity flaw allowing local attackers with admin rights to compromise system security.