Critical Security Vulnerability in Synology's BeeStation Addressed

Critical Security Vulnerability in Synology's BeeStation Addressed

First seen 2 Dec 2025, 18:33 UTC Heise.De 81% similarity 64.7

Article Content

Browse articles
ThreatCluster

A critical security vulnerability (CVE-2025-12686, CVSS 9.8) was discovered in Synology's BeeStation during Pwn2Own 2025 in Ireland. This vulnerability allows attackers to execute arbitrary code remotely due to a buffer copy issue without proper size checking. Synology has released updates to mitigate this risk.

ThreatCluster AI

Community

Browse all →