CVE-2026-53882
Path Traversal in Virtualization Station VM Import
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Virtualization Station 4.1.1.130 and later
| CWE | CWE-59 |
| Vendor | qnap systems inc. |
| Product | virtualization station |
| Published | Oct 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for qnap systems inc. virtualization station
Be the first to know when new unknown vulnerabilities affecting qnap systems inc. virtualization station are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
QNAP Systems Inc. / Virtualization Station
4.1.x < 4.1.1.130
References
Credits
JUNYI LIU