Security feed

Unrated

QNAP NAS File Station Cross-Site Scripting Vulnerability

Type: advisorySource: CISA Known Exploited VulnerabilitiesKnown exploited24 Oct 2026, 21:20 UTC

A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code. CISA required action: Apply updates per vendor instructions.

Products: Network Attached Storage (NAS)CVEs: CVE-2018-19953

Security feed

24 October 2026

QNAP NAS File Station Cross-Site Scripting Vulnerability