Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitycritical

Synology patches critical BeeStation RCE flaw shown at Pwn2Own Ireland 2025

Security Affairsby @securityaffairs ()1 min read2
Read at securityaffairs.com
Analyze CVE-2025-12686 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2025-12686
Tags
cve-2025-12686vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2025-12686
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStation OS before 1.3.2-65648 allows remote…
9.83%

From the original article

1 min read at securityaffairs.com

Synology fixed a critical BeeStation RCE flaw (CVE-2025-12686) shown at Pwn2Own, caused by unchecked buffer input allowing code execution. Synology patched a critical remote code execution (RCE) flaw, tracked as CVE-2025-12686 (CVSS score 9. 8), in BeeStation, demonstrated during the hacking competition Pwn2Own Ireland 2025 .

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.