Severe Vulnerabilities in Synology SSL VPN Client Expose Sensitive Data to Remote Attackers

• •Two critical vulnerabilities in Synology's SSL VPN Client allow remote file access.
• •Users of outdated software versions are at risk and must patch immediately.
• •No known active exploitation has been reported yet.

Synology has disclosed two critical vulnerabilities in its SSL VPN Client that could allow remote attackers to access sensitive files and intercept network traffic. These flaws affect users running outdated versions of the software and have been tracked under the security advisory Synology-SA-26:05. The vulnerabilities pose a significant risk to the integrity of secure communications established through the VPN client. Users are urged to apply the latest patches immediately to mitigate potential exploitation. The vulnerabilities highlight the importance of maintaining up-to-date software for cybersecurity. Failure to patch could lead to unauthorized access and data breaches. Synology has emphasized the need for users to check their software versions and implement the necessary updates. The company has not reported any known exploits in the wild as of now.