QNAP Systems Inc. Hybriddesk Station vulnerabilities

3 vulnerabilities

Known vulnerabilities in QNAP Systems Inc. Hybriddesk Station, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.3CVE-2026-47786qnap systems inc.hybriddesk station
EPSS score
1.07%
An OS command injection vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.23 and later HybridDesk Station 4.3.4 and later8.9CVE-2026-39997qnap systems inc.hybriddesk station
EPSS score
0.24%
A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.22 and later8.4CVE-2025-44015qnap systems inc.hybriddesk station+1
EPSS score
0.90%
A command injection vulnerability has been reported to affect HybridDesk Station. If an attacker gains local network access, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.18 and later