QSearchQSearch

CVE-2025-14713

7.5 HIGH

An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote...

Published: 2026-05-27 · Last updated: 2026-06-02

Severity and scoring

CVSS
7.5 HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE
CWE-749

Affected products

VendorProduct
synologyc2_identity_edge_server

Description

An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from the edge server.

Source: NVD

References

Related CVEs

Same vendor

  • CVE-2024-47273 — An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup Task functionality in Synology ... (4.3 MEDIUM)
  • CVE-2024-47263 — An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup.Repository webapi component in ... (4.1 MEDIUM)
  • CVE-2023-52951 — A cleartext transmission of sensitive information vulnerability in Synology Note Station Client before 2.2.4-703 allows man-in-the-middle... (5.9 MEDIUM)
  • CVE-2022-49042 — An inclusion of functionality from untrusted control sphere vulnerability in MinGW DLL component in Synology Hyper Backup Explorer before... (7.8 HIGH)
  • CVE-2022-49036 — An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Backup for Business... (7.8 HIGH)

Same CWE

  • CVE-2026-7516 — A vulnerability was identified in the Lenovo Android Application, distributed exclusively on tablets in the Chinese market, that could al... (4.3 MEDIUM)
  • CVE-2026-47899 — The Electron preload script in Logseq exposes an API method that allows the renderer process to invoke IPC handlers without proper path v...
  • CVE-2026-44698 — Home Assistant is open source home automation software that puts local control and privacy first (8.3 HIGH)
  • CVE-2026-44798 — Nautobot is a Network Source of Truth and Network Automation Platform (7.1 HIGH)
  • CVE-2026-44836 — view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails (6.5 MEDIUM)