CVE-2026-39997
CVE-2026-39997 · Unauthenticated Remote Input Injection in QNAP HD Station's remotepad
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.22 and later
CVSS 8.9 · High · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
hybriddesk station
- Versions
- ≥ 4.2.x, < 4.2.22: Affected (custom)
Update to 4.2.22