CVE-2025-57707HIGH 8.8EPSS p46.5%

CVE-2025-57707CVE-2025-57707

Description

An improper neutralization of directives in statically saved code ('Static Code Injection') vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to access restricted data / files. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5166 and later

Scoring

CVSS 3.18.8 (HIGH)
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS0.66% probability of exploitation · percentile 46.5% · 2026-06-18T12:00:27Z
Published2026-02-11
Last modified2026-02-12

Underlying weaknesses· 1

CWE-96

References

  1. https://www.qnap.com/en/security-advisory/qsa-26-03

1

TypeTargetConfidenceTier
WeaknessImproper Neutralization of Directives in Statically Saved Code ('Static Code Injection')cwe-960%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-47206
CVE
CVE-2025-30279
CVE
CVE-2026-26240
CVE
CVE-2025-33031
CVE
CVE-2026-26239
CVE
CVE-2025-22486
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.