CVE-2021-33181: Synology Video Station

Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days.

Server-Side Request Forgery (SSRF) vulnerability in webapi component in Synology Video Station before 2.4.10-1632 allows remote authenticated users to send arbitrary request to intranet resources via unspecified vectors.

Affected products

• Synology Video Station: before 2.4.10-1632 (fixed in 2.4.10-1632)

Published 2021-06-01. Last modified 2026-06-17.