CVE-2026-39997: HybridDesk Station 4.2.x to before 4.2.22

Affected technology

HybridDesk Station · 4.2.x to before 4.2.22
QNAP Systems Inc.

Component: Not specified by the source
Function: vulnerability

Attack conditions (Vendor/CNA, CVSS 4.0): Adjacent network · No privileges required · Passive user interaction

What an attacker can do

The source says if exploited, the vulnerability could allow remote attackers to gain access to the system. Vendor/CNA’s CVSS 4.0 assessment (base score 8.9/10) rates confidentiality, integrity and availability impact as high.