Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 03:41:36 +0000 CVE-2026-39993 — Path Traversal to Root RCE in QNAP Download Station via Addon/Search addon Parameter https://db.gcve.eu/vuln/cve-2026-39993 <p><strong>Affected:</strong> QNAP Systems Inc. Download Station</p> <p>A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data.</p> <p>We have already fixed the vulnerability in the following version: Download Station 5.10.2.313 and later Download Station 5.11.3.322 and later</p> <p><strong>Affected:</strong> QNAP Systems Inc. Download Station</p> <p>A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data.</p> <p>We have already fixed the vulnerability in the following version: Download Station 5.10.2.313 and later Download Station 5.11.3.322 and later</p> https://db.gcve.eu/vuln/cve-2026-39993