CVE-2026-39991 | QNAP Notes Station up to 3.9.11 cross site scripting

A vulnerability, which was classified as problematic, was found in QNAP Notes Station up to 3.9.11. Impacted is an unknown function. Such manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-39991. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More