CVE-2025-14713

—

CVSS 3.1

7.5 high

EPSS

<1%p40

Published

May 27, 2026 (May 27, 2026)

Modified

Jun 17, 2026

Description

An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from the edge server.

Vendors: synology
Products: c2 identity edge server
Weakness: CWE-749
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.