ZDI-CAN-28553 LOW 3.1 Overdue Dec 04, 2025

Synology

Synology is a well-known network storage and surveillance systems vendor. This low-severity vulnerability requires adjacent network access and high complexity to exploit, allowing an unauthenticated attacker to gain limited read access to confidential information without affecting system integrity or availability. Security teams should monitor for patches from Synology by the April 2026 deadline, though this vulnerability poses minimal immediate risk given its low CVSS score and restrictive attack requirements.

Advisory Details
Researcher Discovered by: gcali (_gcali)
Reported December 04, 2025
Deadline April 03, 2026 14d overdue
CVSS Vector AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy