QNAP Systems Inc Hybriddesk Station vulnerabilities

2 CVEs affecting QNAP Systems Inc Hybriddesk Station, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-47786, published 2026-10-15.

More from QNAP Systems Inc.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-47786, published 2026-10-15. Critical severity, CVSS 9.3. EPSS: 1.1% chance of exploitation in the next 30 days. An OS command injection vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already…
• CVE-2026-39997, published 2026-10-15. High severity, CVSS 8.9. EPSS: 0.2% chance of exploitation in the next 30 days. A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the…