QNAP Systems Inc. Download Station

• CVE-2026-39989 Medium 5.3 SSRF in QNAP Download Station 0.3%
• CVE-2026-34014 High 8.4 ds-move-files.sh is writable and executed as root 0.1%
• CVE-2026-39993 High 8.7 Path Traversal to Root RCE in QNAP Download Station via Addon/Search addon Parameter 0.4%
• CVE-2025-58463 Low 2.3 Download Station 0.5%
• CVE-2025-58465 Low 2.2 Download Station 0.2%
• CVE-2024-38640 High 7.0 Download Station 0.2%