GCVE - cpe:2.3:a:qnap_systems_inc.:notes_station

Approved changes feed: RSS · Atom

cpe:2.3:a:qnap_systems_inc.:notes_station_3:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Qnap Systems Inc. (`1f66ac1e-0889-51bf-b27f-24c7175e5920`)
Product	Notes Station 3 (`46df9963-6916-5e5f-86ab-0918d4782e84`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-34007`	vulnerable	2026-11-03 10:17:23.315636	RCE Unsanitized `X-Forwarded-For` header passed to `shell_exec()` via broken IP validation fallback in `getClientIP()` An OS command injection vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.11 and later Published: 2026-10-15T09:37:20.174Z Updated: 2026-10-15T13:36:35.475Z Open on db.gcve.eu Reference links https://www.qnap.com/en/app-release-notes?keyword=Notes%20Station%203&app=NotesStation3&product-line=nas	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-34008`	vulnerable	2026-11-03 10:17:22.452008	Privilege Escalation World-writable crontab path monitored and executed by root-owned process An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If a local attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.11 and later Published: 2026-10-15T09:37:29.958Z Updated: 2026-10-15T13:33:55.371Z Open on db.gcve.eu Reference links https://www.qnap.com/en/app-release-notes?keyword=Notes%20Station%203&app=NotesStation3&product-line=nas	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-34009`	vulnerable	2026-11-03 10:17:21.584587	Container Escape Host user home directory mounted with write access into application container An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.11 and later Published: 2026-10-15T09:37:38.588Z Updated: 2026-10-15T13:33:33.092Z Open on db.gcve.eu Reference links https://www.qnap.com/en/app-release-notes?keyword=Notes%20Station%203&app=NotesStation3&product-line=nas	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-39991`	vulnerable	2026-11-03 10:15:54.794810	Stored Cross-Site Scripting (XSS) in Note Station file upload functionality A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If a remote attacker gains a user account, they can then exploit the vulnerability to inject malicious code. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.12 and later Published: 2026-10-15T09:37:51.830Z Updated: 2026-10-29T07:41:10.166Z Open on db.gcve.eu Reference links https://www.qnap.com/en/app-release-notes?keyword=Notes%20Station%203&app=NotesStation3&product-line=nas	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-38646`	vulnerable	2026-06-08 06:41:47.824321	Notes Station 3 An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow local authenticated attackers who have gained administrator access to read or modify the resource. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.7 and later Published: 2024-11-22T15:32:20.386Z Updated: 2024-11-22T16:49:50.421Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-24-36	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-38645`	vulnerable	2026-06-08 06:41:47.823880	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-38644`	vulnerable	2026-06-08 06:41:47.823114	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-38643`	vulnerable	2026-06-08 06:41:47.822003	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-27126`	vulnerable	2026-06-08 06:31:27.629446	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-27122`	vulnerable	2026-06-08 06:31:27.608125	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Notes Station 3

Notes

PURL mappings

Vulnerability references

Contribute