CVE-2022-49036

—

CVSS 3.1

7.8 high

EPSS

<1%p2

Published

Jun 3, 2026 (Jun 3, 2026)

Modified

Jul 22, 2026

Description

An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Backup for Business Recovery Media Creator before 2.5.0-2081 allows local users to execute arbitrary code via unspecified vectors.

Vendors: synology
Products: active backup for business recovery media creator
Weakness: CWE-829
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.