Qnap Download Station
3 CVEs affecting Qnap Download Station. Latest disclosed: 2025-11-07. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-58465 | Medium | 5.4 | 2025-11-07 | A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the v… |
CVE-2024-38640 | Medium | 5.4 | 2024-09-06 | A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If exploited, the vulnerability could allow authenticated users to inj… |
CVE-2025-58463 | Medium | 4.9 | 2025-11-07 | A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains an administrator account, they can then exploi… |