CVE-2022-22681: Synology Photo Station

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors.

Affected products

• Synology Photo Station: before 6.8.16-3506 (fixed in 6.8.16-3506)

Published 2022-07-06. Last modified 2026-06-17.