Vulnerability Description
An improper neutralization of directives in statically saved code ('Static Code Injection') vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to access restricted data / files. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5166 and later
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Qnap | File Station | >= 5.5.6.4691, < 5.5.6.5190 |
Related Weaknesses (CWE)
References
- https://www.qnap.com/en/security-advisory/qsa-26-03Vendor Advisory
FAQ
What is CVE-2025-57707?
CVE-2025-57707 is a vulnerability with a CVSS score of 8.8 (HIGH). An improper neutralization of directives in statically saved code ('Static Code Injection') vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they ca...
How severe is CVE-2025-57707?
CVE-2025-57707 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-57707?
Check the references section above for vendor advisories and patch information. Affected products include: Qnap File Station.