ZDI-CAN-28553
LOW 3.1
Overdue
Dec 04, 2025
Synology
Synology is a well-known network storage and surveillance systems vendor. This low-severity vulnerability requires adjacent network access and high complexity to exploit, allowing an unauthenticated attacker to gain limited read access to confidential information without affecting system integrity or availability. Security teams should monitor for patches from Synology by the April 2026 deadline, though this vulnerability poses minimal immediate risk given its low CVSS score and restrictive attack requirements.
Advisory Details
Researcher
Discovered by:
gcali (_gcali)
Reported
December 04, 2025
Deadline
April 03, 2026
14d overdue
CVSS Vector
AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N