CVE-2026-22899: File Station 5
Published Jun 10, 2026
·Updated
A NULL pointer dereference vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5208 and later
Affected Software
2 affected components
Synology File Station 6
Synology File Station 5<5.5.6.5208
Remediation
Information
We have already fixed the vulnerability in the following version:
File Station 5 5.5.6.5208 and later
Event History
Jun 10, 2026
CVE Published
via MITRE·03:07 AM
Data Sourced
via MITRE·03:07 AM
RemedyDescriptionWeakness
Data Sourced
via NVD·04:17 AM
DescriptionSeverityWeakness