Download Station vulnerabilities

2 known vulnerabilities in Download Station from QNAP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.4 High severity

  Download Station: Incorrect Permission Assignment for Critical Resource

  CVE-2026-34014Oct 15, 2026QNAP

  An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have a

• 8.7 High severity

  Download Station: Relative Path Traversal

  CVE-2026-39993Oct 15, 2026QNAP

  A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerab