CVE-2016-10330: Synology Photo Station

High severity, CVSS 7.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in synophoto_dsm_user, a SUID program, as used in Synology Photo Station before 6.5.3-3226 allows local users to write to arbitrary files via unspecified vectors.

Affected products

• Synology Photo Station: up to and including 6.5.2-3225

Published 2017-05-12. Last modified 2026-06-17.