Synology

8 CVEs published in the last four months. Exploited flaws first.

Critical1

High7

Medium0

Exploited (KEV)0

All recent CVEs

CVE	CVSS	Severity	Product	Summary	Published
CVE-2025-12686	9.8	critical	beestation os	Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology Be	153d ago
CVE-2025-30028	8.6	high	active backup for business	A vulnerability in Active Backup for Business allows unauthorized remote attackers to read arbitrary files.	153d ago
CVE-2025-13392	8.1	high	diskstation manager	Improper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation Manager (DSM) be	153d ago
CVE-2023-52945	7.8	high	beedrive	Uncontrolled search path element vulnerability in OpenSSL DLL component in Synology BeeDrive for desktop before 1.	153d ago
CVE-2022-49036	7.8	high	active backup for business recovery media creator	An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Act	146d ago
CVE-2022-49042	7.8	high	hyper backup explorer	An inclusion of functionality from untrusted control sphere vulnerability in MinGW DLL component in Synology Hyper	146d ago
CVE-2025-14713	7.5	high	c2 identity edge server	An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.	153d ago
CVE-2026-4793	7.3	high	assistant	An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read	85d ago

Filter the full tracker by Synology →