CVE-2022-36536: Syncovery

Critical severity, CVSS 9.8. EPSS: 4.9% chance of exploitation in the next 30 days.

An issue in the component post_applogin.php of Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below allows attackers to escalate privileges via creating crafted session tokens.

Affected products

• Syncovery Syncovery: from 8.00, before 9.48j (fixed in 9.48j)

Published 2022-09-16. Last modified 2026-07-09.