← CVE Intelligence

CVE-2026-26244

SQLi#1 SQL Injection in class_videos.php _getFilters PUBLISHED

Description (CNA)

A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.8 and later

Affected (CNA)

Vendor / productVersions
QNAP Systems Inc. / Video Stationaffected 5.8.x before 5.8.8

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.