Lucene search
K

(Pwn2Own) Synology BeeStation Plus auth_info Stack-based Buffer Overflow Remote Code Execution Vulnerability

๐Ÿ—“๏ธย 03 Dec 2025ย 00:00:00Reported byย @Tek_7987 and @_Anyfun (both working @Synacktiv)Typeย 
zdi
ย zdi
๐Ÿ”—ย www.zerodayinitiative.com๐Ÿ‘ย 3ย Views

Remote code execution on Synology BeeStation Plus via stack overflow in auth info parsing.

Related
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2025-12686
27 May 202608:37
โ€“attackerkb
Circl
CVE-2025-12686
12 Nov 202502:07
โ€“circl
CNNVD
Synology BeeStation OS ๅฎ‰ๅ…จๆผๆดž
27 May 202600:00
โ€“cnnvd
CVE
CVE-2025-12686
27 May 202608:37
โ€“cve
Cvelist
CVE-2025-12686
27 May 202608:37
โ€“cvelist
EUVD
EUVD-2025-209957
27 May 202608:37
โ€“euvd
NVD
CVE-2025-12686
27 May 202609:16
โ€“nvd
Positive Technologies
PT-2025-46327
10 Nov 202500:00
โ€“ptsecurity
RedhatCVE
CVE-2025-12686
5 Jun 202619:41
โ€“redhatcve
The Hacker News
โšก Weekly Recap: Fortinet Exploited, China's AI Hacks, PhaaS Empire Falls & More
17 Nov 202512:34
โ€“thn
Rows per page

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Dec 2025 00:00Current
7.6High risk
Vulners AI Score7.6
CVSS 39.8
EPSS0.02762
3