Qnap Download Station vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Qnap Download Station: 2 record(s), with affected versions and fixes.cpe:2.3:a:qnap:download_station
CVE-2025-58465
Medium · 5.4
CWE-79 Nov 7, 2025
Download Station
A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data.
We have already fixed the vulnerability in the following versions:
Download Station 5.10.0.305 ( 2025/09/16 ) and later
Download Station 5.10.0.304 ( 2025/09/08 ) and later
CVE-2025-58463
Medium · 4.9
CWE-23 Nov 7, 2025
Download Station
A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data.
We have already fixed the vulnerability in the following versions:
Download Station 5.10.0.305 ( 2025/09/16 ) and later
Download Station 5.10.0.304 ( 2025/09/08 ) and later