CVE-2025-57707

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An improper neutralization of directives in statically saved code ('Static Code Injection') vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to access restricted data / files.

We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5166 and later

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-96

Affected software

No affected versions have been published.

Timeline

Published: Feb 11, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-577086.5An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains CVE-2025-577098.1A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit CVE-2025-577104.9An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains CVE-2025-577114.9An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains CVE-2025-577126.5A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit t CVE-2025-577137.5A weak authentication vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to g CVE-2025-577147.8An unquoted search path or element vulnerability has been reported to affect NetBak Replicator. If a local attacker gains a user account, th CVE-2025-577167.3An Uncontrolled Search Path Element vulnerability [CWE-427] in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versio CVE-2025-577277.5In JetBrains IntelliJ IDEA before 2025.2 credentials disclosure was possible via remote reference CVE-2025-577286.5In JetBrains IntelliJ IDEA before 2025.2 improper access control allowed Code With Me guest to discover hidden files CVE-2025-577297.3In JetBrains IntelliJ IDEA before 2025.2 unexpected plugin startup was possible due to automatic LSP server start CVE-2025-577304.6In JetBrains IntelliJ IDEA before 2025.2 hTML injection was possible via Remote Development feature