CVE-2026-26241

Critical · CVSS 9.1

QNAP File Station 5 — Stack-based buffer overflow (CWE-121) remote memory corruption / process crash

CVSS: 9.1; nvd
EPSS: —
KEV: No
Class: other; CWE-121

Description

A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later

Search profile — drives PoC discovery

Symbols File Station 5QSA-26-275.5.6.5243

Keywords CVE-2026-26241QNAPFile Station 5buffer overflowQSA-26-27CWE-121stack buffer overflowremote exploitmemory corruption

Versions: File Station 5 < 5.5.6.5243

Ranked PoCs (10) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

shauntdergrigorian/cve-2006-6184 needs review

gh_search · Python

★ 11
csBlueChip/Overflow2 needs review

gh_search · Makefile

★ 3
0xcc12138/DCS-935L-HNAP-Service-CVE needs review

gh_search

★ 2
almanatra/CVE-2025-0282 needs review

gh_search · Python

★ 2
AXRoux/Achat-0.150-beta7---Remote-Buffer-Overflow needs review

gh_search · Python

★ 0
DaviGSantana/CVE-2017-14980 needs review

gh_search · C

★ 0
DaviGSantana/CVE-2023-50965 needs review

gh_search · C

★ 0
SonorousGuardian/Buffer-Exploit-lab-Simulation needs review

gh_search · Python

★ 0
mbanyamer/CVE-2026-32743-PX4-Autopilot-MavlinkLogHandler-Stack-Buffer-Overflow-DoS- needs review

gh_search

★ 0
securityforge/CVE2009-2585_HP_Power_Manager_BoF needs review

gh_search · Python

★ 0

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

References

https://www.qnap.com/en/security-advisory/qsa-26-10

Status: enriched · ingested 2026-06-12T18:00:30.000Z · profiled 2026-06-16T18:20:23.035Z