CVE-2026-24720: CWE-770 in QNAP Systems Inc. File Station 5
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later
AI Analysis
Technical Summary
This vulnerability (CWE-770) in QNAP File Station 5 allows a remote attacker who has obtained a user account to exploit uncontrolled resource allocation. By doing so, the attacker can cause denial of resource availability for other systems, applications, or processes that require the same resource type. The vulnerability affects version 5.5.0 and was addressed in version 5.5.6.5243 and later.
Potential Impact
The vulnerability enables a remote user with valid credentials to exhaust or monopolize certain resources, thereby preventing legitimate systems or processes from accessing those resources. This can lead to degraded service or denial of service conditions affecting the affected QNAP File Station 5 instance.
Mitigation Recommendations
The vulnerability has been fixed in File Station 5 version 5.5.6.5243 and later. Users should upgrade to this version or newer to remediate the issue. No additional mitigation steps are indicated.
CVE-2026-24720: CWE-770 in QNAP Systems Inc. File Station 5
Description
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later
CVSS v4.0
Score 1.3low
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CWE-770) in QNAP File Station 5 allows a remote attacker who has obtained a user account to exploit uncontrolled resource allocation. By doing so, the attacker can cause denial of resource availability for other systems, applications, or processes that require the same resource type. The vulnerability affects version 5.5.0 and was addressed in version 5.5.6.5243 and later.
Potential Impact
The vulnerability enables a remote user with valid credentials to exhaust or monopolize certain resources, thereby preventing legitimate systems or processes from accessing those resources. This can lead to degraded service or denial of service conditions affecting the affected QNAP File Station 5 instance.
Mitigation Recommendations
The vulnerability has been fixed in File Station 5 version 5.5.6.5243 and later. Users should upgrade to this version or newer to remediate the issue. No additional mitigation steps are indicated.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- qnap
- Date Reserved
- 2026-01-26T06:41:35.897Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a28dcc68dd33fbd85dbad6f
Added to database: 06/10/2026, 03:40:54 UTC
Last enriched: 06/17/2026, 07:38:20 UTC
Last updated: 07/31/2026, 19:22:58 UTC
Views: 65
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.