Qnap Download Station vulnerabilities
3 vulnerabilities
Known vulnerabilities in Qnap Download Station, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-58463qnap systems inc.download station+1
EPSS score0.50%
A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data.
We have already fixed the vulnerability in the following versions:
Download Station 5.10.0.305 ( 2025/09/16 ) and later
Download Station 5.10.0.304 ( 2025/09/08 ) and laterCVE-2025-58465qnap systems inc.download station+1EPSS score0.22%
A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data.
We have already fixed the vulnerability in the following versions:
Download Station 5.10.0.305 ( 2025/09/16 ) and later
Download Station 5.10.0.304 ( 2025/09/08 ) and laterCVE-2024-38640qnap systems inc.download station+1EPSS score0.25%
A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network.
We have already fixed the vulnerability in the following version:
Download Station 5.8.6.283 ( 2024/06/21 ) and later