CVE-2025-53409

MediumCVSS 6.5/10Last modified Oct 18, 2026

Description

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource.

We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5018 and later

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-770

Affected software

No affected versions have been published.

Timeline

Published
Nov 7, 2025
Last modified
Oct 18, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-53416.4The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting viCVE-2025-534106.5An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gainsCVE-2025-534114.9An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gainsCVE-2025-534126.5A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can theCVE-2025-534136.5An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gainsCVE-2025-534144.9A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an aCVE-2025-534157.8Delta Electronics DTM Soft Project File Parsing Deserialization of Untrusted Data Remote Code ExecutionCVE-2025-534167.8Delta Electronics DTN Soft Project File Parsing Deserialization of Untrusted Data Remote Code ExecutionCVE-2025-534179.3DIAView (v4.2.0 and prior) - Directory Traversal Information Disclosure VulnerabilityCVE-2025-534188.6Delta Electronics COMMGR has Stack-based Buffer Overflow vulnerability.CVE-2025-534197.8Delta Electronics COMMGR has Code Injection vulnerability.CVE-2025-53426.5Zohocorp ManageEngine Exchange Reporter Plus through 5721 are vulnerable to ReDOS vulnerability in the search module.