CVE-2025-30028

🗓️ 27 May 2026 08:40:46Reported by synologyType

CVE-2025-30028 allows remote attackers to read arbitrary files in Active Backup for Business.

Reporter	Title	Published	Views	Family All 10
attackerkb	CVE-2025-30028	27 May 202608:40	–	attackerkb
Circl	CVE-2025-30028	27 May 202610:01	–	circl
CNNVD	Synology Active Backup for Business SQL注入漏洞	27 May 202600:00	–	cnnvd
Cvelist	CVE-2025-30028	27 May 202608:40	–	cvelist
EUVD	EUVD-2025-209961	27 May 202608:40	–	euvd
NVD	CVE-2025-30028	27 May 202609:16	–	nvd
Positive Technologies	PT-2026-43588	27 May 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2025-30028: Improper Neutralization of Special Elements used in an SQL Command	27 May 202600:00	–	rapid7
RedhatCVE	CVE-2025-30028	5 Jun 202619:41	–	redhatcve
Vulnrichment	CVE-2025-30028	27 May 202608:40	–	vulnrichment

NVD

Vulners

Node

AND

synology active_backup_for_businessMatch2.7.1-23234

synology diskstation_managerMatch7.2

Node

AND

synology active_backup_for_businessMatch2.7.1-13234

synology diskstation_managerMatch7.1

Node

AND

synology active_backup_for_businessMatch2.7.1-3234

synology diskstation_managerMatch6.2

[
  {
    "vendor": "Synology",
    "product": "Active Backup for Business",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThan": "2.7.1-3234",
        "versionType": "semver"
      },
      {
        "version": "*",
        "status": "affected",
        "lessThan": "2.7.1-13234",
        "versionType": "semver"
      },
      {
        "version": "*",
        "status": "affected",
        "lessThan": "2.7.1-23234",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "affected"
  }
]

Source	Link
synology	www.synology.com/en-global/security/advisory/Synology_SA_25_02

30 Sep 2026 21:10Current

6Medium risk

Vulners AI Score6

CVSS 3.18.6

EPSS0.00368

SSVC

CWE-89