CVE-2018-0718: QNAP Music Station

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Command injection vulnerability in Music Station 5.1.2 and earlier versions in QNAP QTS 4.3.3 and 4.3.4 could allow remote attackers to run arbitrary commands in the compromised application.

Affected products

• QNAP Music Station: up to and including 5.1.2

Published 2018-09-14. Last modified 2026-06-17.