Synology C2 Identity CVE-2025-14713

Apply the vendor-released patch: upgrade the C2 Identity Edge Server package to version 1.76.0-0307 or later, per Synology advisory SA_25_18 (https://www.synology.com/en-global/security/advisory/Synology_SA_25_18). No vendor workaround was published in the available data, so patching is the primary and recommended action. Until the update is applied, reduce exposure by restricting network reachability of the edge server - limit inbound access to the package's service ports to trusted management networks or place it behind a VPN/firewall ACL so it is not reachable from untrusted networks; the trade-off is that overly tight restrictions could disrupt legitimate identity-bridging traffic between on-premises directories and the C2 Identity cloud, so scope the rules to known C2 Identity endpoints. After patching, treat any credentials that may have been exposed as potentially compromised and rotate them.