QNAP File Station 6 Unbounded Resource Allocation DoS
CVE-2026-24720 Published on June 10, 2026
File Station 5
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource.
We have already fixed the vulnerability in the following version:
File Station 5 5.5.6.5243 and later
Weakness Type
Allocation of Resources Without Limits or Throttling
The software allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.
Products Associated with CVE-2026-24720
Want to know whenever a new CVE is published for QNAP File Station? stack.watch will email you.
Affected Versions
QNAP Systems Inc. File Station 5:- Version 5.5.0 and below 5.5.6.5243 is affected.