CVE-2026-47786

UNKNOWN

Description

An OS command injection vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.23 and later HybridDesk Station 4.3.4 and later

Timeline

Published:October 15th, 2026 10:17 AM

Last modified:October 15th, 2026 4:32 PM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-78

References & Reports

Advisories, patches, and third-party reports

https://www.qnap.com/en/app-release-notes?keyword=HybridDesk%20Station&app=HD_Station&product-line=nas

Source: NIST NVD · Data may lag official sources by up to one minute