What is the CVSS score of CVE-2024-47263?

CVE-2024-47263 has a CVSS 3.1 base score of 4.1 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N. EPSS exploitation probability: 0.0%.

Is there a patch available for CVE-2024-47263?

Yes, a patch is available for CVE-2024-47263. Update the affected software to the latest version immediately.

Hyper Backup CVE-2024-47263

EUVD-2024-55609 MEDIUM

Path Traversal (CWE-22)

2026-06-03 security@synology.com

GHSA-qqc4-wwg4-7292

Path Traversal Synology Hyper Backup

4.1

CVSS 3.1 · Vendor: synology

Severity by source

Vendor (synology) PRIMARY

4.1 MEDIUM

AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N

Primary rating from Vendor (synology) · only source for this CVE.

CVSS VectorVendor: synology

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Patch available

Jun 03, 2026 - 16:01 EUVD

CVE Published

Jun 03, 2026 - 14:16 cve.org

MEDIUM 4.1

DescriptionCVE.org

An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup.Repository webapi component in Synology Hyper Backup before 4.1.2-4036 allows remote authenticated users with administrator privileges to write specific files containing non-sensitive information via unspecified vectors.

AnalysisAI

An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup.Repository webapi component in Synology Hyper Backup before 4.1.2-4036 allows remote. Rated medium severity (CVSS 4.1), this vulnerability is remotely exploitable, low attack complexity.

Technical ContextAI

This vulnerability is classified as Path Traversal (CWE-22), which allows attackers to access files and directories outside the intended path. An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup.Repository webapi component in Synology Hyper Backup before 4.1.2-4036 allows remote authenticated users with administrator privileges to write specific files containing non-sensitive information via unspecified vectors. Affected products include: Synology Hyper Backup. Version information: before 4.1.2.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Validate and canonicalize file paths. Use chroot or sandboxing. Reject input containing path separators or '../' sequences.