CVE-2021-27648: Synology Antivirus Essential

High severity, CVSS 8.8. EPSS: 2.8% chance of exploitation in the next 30 days.

Externally controlled reference to a resource in another sphere in quarantine functionality in Synology Antivirus Essential before 1.4.8-2801 allows remote authenticated users to obtain privilege via unspecified vectors.

Affected products

• Synology Antivirus Essential: before 1.4.8-2801 (fixed in 1.4.8-2801)

Published 2021-04-28. Last modified 2026-06-17.