Heise.De Critical Security Vulnerability in Synology's BeeStation Addressed
Article Content
Browse articles 
A critical security vulnerability (CVE-2025-12686, CVSS 9.8) was discovered in Synology's BeeStation during Pwn2Own 2025 in Ireland. This vulnerability allows attackers to execute arbitrary code remotely due to a buffer copy issue without proper size checking. Synology has released updates to mitigate this risk.
Ask AI about this cluster
Answers cite the sources they use
Updated 229d ago How this analysis works
More articles in this cluster (1)
Following this threat?
Track Qnap and CVE-2025-12686 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Buffer Overflow Vulnerability in sngrep Affects Fedora Users A critical buffer overflow vulnerability, CVE-2026-90558, has been identified in sngrep versions up to 1.8.4, affecting Fedora systems. The flaw allows for potential exploitation through SIP headers, posing a significant risk to users. CISA has confirmed that this vulnerability is being actively exploited in the wild.… 
Oracle gvfs Buffer Overflow Vulnerabilities Prompt Updates On October 5, 2026, Oracle released updates for its gvfs software to address significant buffer overflow vulnerabilities identified as CVE-2026-84268 and CVE-2026-88924. These vulnerabilities could allow remote code execution on affected systems, particularly impacting users of Oracle Linux 8, 9, and 10. The updates…