CVE-2026-26239
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
A buffer overflow vulnerability in File Station 5. A remote attacker with a user account can exploit this vulnerability to modify memory or crash processes. The vulnerability has been fixed in File Station 5 version 5.5.6.5208 and later.
Risk Assessment
An attacker with a user account can cause service crashes or potentially execute arbitrary code, leading to confidentiality and integrity breaches.
Recommendation
Update File Station 5 to version 5.5.6.5208 or later.
Other vulnerabilities in File Station 5
See all- CVE-2026-26241Critical
Buffer overflow in File Station 5 allows a remote attacker to modify memory or crash processes. The vulnerability is fixed in version 5.5.6.5243 and later.
- CVE-2026-26240Critical
Buffer overflow in File Station 5 allows a remote attacker to modify memory or crash processes. The vulnerability is fixed in version 5.5.6.5243 and later.
- CVE-2026-24724High
An incorrect authorization vulnerability in File Station 6 allows a remote attacker who gains a user account to bypass intended access restrictions. The issue is fixed in File Station 5 version 5.5.6.5243 and later.
- CVE-2026-24720Medium
File Station 6 has a resource allocation without limits vulnerability. A remote attacker who gains a user account can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.
- CVE-2026-22899Medium
File Station 6 has a NULL pointer dereference vulnerability. A remote attacker who gains a user account can exploit it to launch a denial-of-service (DoS) attack.
Original NVD description (English source)
A buffer overflow vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5208 and later