What is GHSA-cpw3-6qgh-mmpq?

GHSA-cpw3-6qgh-mmpq is a security advisory published by GitHub Security Advisories with High severity. A missing authentication for critical function vulnerability has been reported to affect...

Which CVE IDs does GHSA-cpw3-6qgh-mmpq cover?

GHSA-cpw3-6qgh-mmpq covers the following CVE IDs: CVE-2026-39997. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-cpw3-6qgh-mmpqHigh

A missing authentication for critical function vulnerability has been reported to affect...

Vendor

GitHub Security Advisories

Published

October 15, 2026

Last Modified

October 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-39997 →

📋 Description

A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system.

We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.22 and later

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-39997
https://www.qnap.com/en/app-release-notes?keyword=HybridDesk%20Station&app=HD_Station&product-line=nas
https://github.com/advisories/GHSA-cpw3-6qgh-mmpq