Heise.De

Critical RCE Vulnerability in Synology BeeStation OS Identified

First seen 12 Nov 2025, 19:02 UTC • Heise.De

•77.7

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A critical zero-day vulnerability in Synology's BeeStation OS allows remote code execution (RCE) on unpatched devices. The flaw, originating from a buffer overflow, has a CVSS score of 9.8, indicating severe risk. Synology has acknowledged the issue and is preparing updates to mitigate the threat.

How this analysis works

Attack Flow

Continue Reading

Critical Vulnerabilities in pgAdmin 4 Expose Databases to Remote Code Execution AryStinger Botnet Compromises Over 4,300 D-Link Routers for Reconnaissance QNAP Patches Seven Critical Zero-Day Vulnerabilities Following Pwn2Own 2025 Critical Security Vulnerability in Synology's BeeStation Addressed QNAP Addresses 14 Vulnerabilities in NAS and Surveillance Systems GitHub Actions Enhances Security Against 'Pwn Request' Attacks

Critical RCE Vulnerability in Synology BeeStation OS Identified

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading