CVE-2026-44084High· 7.5▾ TwilightAn authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 16.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
8.7 → 7.5
An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data.
We have already fixed the vulnerability in the following version: Video Station 5.8.8 and later
video_station >= 5.8.0, < 5.8.8Upgrade past the affected range:
video_station 5.8.8Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-26244High· 8.8A SQL injection vulnerability has been reported to affect Video Station
CVE-2026-26245High· 8.8A SQL injection vulnerability has been reported to affect Video Station
CVE-2026-34015Medium· 6.5A path traversal vulnerability has been reported to affect Video Station
CVE-2026-24723Medium· 6.5A NULL pointer dereference vulnerability has been reported to affect File Station 5
CVE-2026-24722Medium· 6.5A NULL pointer dereference vulnerability has been reported to affect File Station 5
CVE-2026-24721Medium· 6.5A NULL pointer dereference vulnerability has been reported to affect File Station 5