Skip to contentQnap Systems Inc. Notes Station 3 vulnerabilities
- qnap systems inc. notes station 3Stored Cross-Site Scripting (XSS) in Note Station file upload functionalityCVE-2026-399914.8 Medium
- qnap systems inc. notes station 3**Container Escape** Host user home directory mounted with write access into application containerCVE-2026-340098.4 High
- qnap systems inc. notes station 3**Privilege Escalation** World-writable crontab path monitored and executed by root-owned processCVE-2026-340088.5 High
- qnap systems inc. notes station 3**RCE** Unsanitized `X-Forwarded-For` header passed to `shell_exec()` via broken IP validation fallback in `getClientIP()`CVE-2026-340076.9 Medium
- qnap notes station 3Notes Station 3CVE-2024-386439.3 Critical
- qnap notes station 3Notes Station 3CVE-2024-386448.7 High
- qnap notes station 3Notes Station 3CVE-2024-386459.4 Critical
- qnap notes station 3Notes Station 3CVE-2024-386468.4 High
- qnap notes station 3Notes Station 3CVE-2024-271266.3 Medium
- qnap notes station 3Notes Station 3CVE-2024-271226.3 Medium