CVE-2026-44084: Access Code Forgery in Video Station leading to unauthorized media access
Published Oct 15, 2026
·Updated
An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data.
We have already fixed the vulnerability in the following version: Video Station 5.8.8 and later
Affected Software
1 affected component
Synology Video Station<5.8.8
Event History
Oct 15, 2026
CVE Published
via MITRE·09:31 AM
Data Sourced
via MITRE·09:31 AM
RemedyDescriptionWeakness
Frequently Asked Questions
1
Which deployments need to be updated?
Synology Video Station versions earlier than 5.8.8 are affected according to the available information. Video Station 5.8.8 and later contain the fix.
2
What access could an attacker gain?
A remote attacker could exploit the authorization bypass to obtain sensitive data, including unauthorized access to media.