Approved changes feed: RSS · Atom

cpe:2.3:a:qnap_systems_inc.:hybriddesk_station:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorQnap Systems Inc. (1f66ac1e-0889-51bf-b27f-24c7175e5920)
ProductHybriddesk Station (c0ae1b39-943e-5dca-8ae0-06a15a98cab3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-47786 vulnerable 2026-11-03 10:17:38.185905 Pre-Authentication Command Injection
An OS command injection vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.23 and later HybridDesk Station 4.3.4 and later
Published: 2026-10-15T09:38:12.063Z
Updated: 2026-10-15T13:21:25.935Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39997 vulnerable 2026-11-03 10:15:55.117126 Unauthenticated Remote Input Injection in QNAP HD Station's remotepad
A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.22 and later
Published: 2026-10-15T09:38:02.291Z
Updated: 2026-10-15T13:31:41.953Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-44015 vulnerable 2026-06-08 07:25:10.610546 HybridDesk Station
A command injection vulnerability has been reported to affect HybridDesk Station. If an attacker gains local network access, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.18 and later
Published: 2025-08-29T17:17:15.478Z
Updated: 2025-08-29T18:21:41.548Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.