Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Synology BeeStation Manager and OS: Unchecked Input Allows Code Execution

CVE-2025-12686 · published 5 months ago
Summary

A security issue in Synology BeeStation Manager and OS allows hackers to run unauthorized code on your system if they send the right information to the AdminCenter. This could allow them to take control of your system. You should update to the latest version of Synology BeeStation Manager and OS to fix this issue.

Original advisory text
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStation OS before 1.3.2-65648 allows remote attackers to execute arbitrary code vi...
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStation OS before 1.3.2-65648 allows remote attackers to execute arbitrary code via unspecified vectors.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
3% chance of attack within 30 days
Type
CWE-120Classic Buffer Overflow
Timeline
Published27 May 2026
Updated30 Oct 2026
First seen27 May 2026
Sources
CVE-2025-12686 · NVD
Track software like this
Free during beta