Skip to content
Critical RCE Vulnerability in Synology BeeStation OS Identified

Critical RCE Vulnerability in Synology BeeStation OS Identified

First seen 12 Nov 2025, 19:02 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

A critical zero-day vulnerability in Synology's BeeStation OS allows remote code execution (RCE) on unpatched devices. The flaw, originating from a buffer overflow, has a CVSS score of 9.8, indicating severe risk. Synology has acknowledged the issue and is preparing updates to mitigate the threat.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 218d ago How this analysis works

More articles in this cluster (1)

Following this threat?

Track Qnap and CVE-2025-12686 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed