https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-44084.htmlhttps://patchthecve.com/cve/CVE-2026-44084.htmlFri, 16 Oct 2026 17:10:32 +0000HIGH 7.5: An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: Video Station 5.8.8 and laterhttps://patchthecve.com/cve/CVE-2026-34015.htmlhttps://patchthecve.com/cve/CVE-2026-34015.htmlFri, 16 Oct 2026 17:12:15 +0000MEDIUM 6.5: A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Video Station 5.8.8https://patchthecve.com/cve/CVE-2026-26245.htmlhttps://patchthecve.com/cve/CVE-2026-26245.htmlFri, 16 Oct 2026 17:12:51 +0000HIGH 8.8: A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.8 and laterhttps://patchthecve.com/cve/CVE-2026-26244.htmlhttps://patchthecve.com/cve/CVE-2026-26244.htmlFri, 16 Oct 2026 17:13:24 +0000HIGH 8.8: A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.8 and laterhttps://patchthecve.com/cve/CVE-2026-24723.htmlhttps://patchthecve.com/cve/CVE-2026-24723.htmlFri, 16 Oct 2026 17:16:57 +0000MEDIUM 6.5: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.https://patchthecve.com/cve/CVE-2026-24722.htmlhttps://patchthecve.com/cve/CVE-2026-24722.htmlFri, 16 Oct 2026 17:18:18 +0000MEDIUM 6.5: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.https://patchthecve.com/cve/CVE-2026-24721.htmlhttps://patchthecve.com/cve/CVE-2026-24721.htmlFri, 16 Oct 2026 17:18:40 +0000MEDIUM 6.5: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.https://patchthecve.com/cve/CVE-2025-66275.htmlhttps://patchthecve.com/cve/CVE-2025-66275.htmlMon, 19 Oct 2026 22:10:00 +0000MEDIUM 6.5: A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Video Station 5.8.5https://patchthecve.com/cve/CVE-2025-66272.htmlhttps://patchthecve.com/cve/CVE-2025-66272.htmlMon, 19 Oct 2026 22:10:00 +0000MEDIUM 6.5: A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Video Station 5.8.5https://patchthecve.com/cve/CVE-2026-80975.htmlhttps://patchthecve.com/cve/CVE-2026-80975.htmlMon, 19 Oct 2026 09:17:29 +0000HIGH 7.8: In the Linux kernel, the following vulnerability has been resolved: mfd: qnap-mcu: keep the reply buffer alive past a command timeout qnap_mcu_exec() publishes an on-stack buffer to the receive path: unsigned char rx[QNAP_MCU_RX_BUFFER_SIZE]; ... reply->data = rx; reply->length = length; and