CVE-2023-52951: Synology Note Station Client

Medium severity, CVSS 5.9. EPSS: 0.1% chance of exploitation in the next 30 days.

A cleartext transmission of sensitive information vulnerability in Synology Note Station Client before 2.2.4-703 allows man-in-the-middle attackers to obtain user credential.

Affected products

• Synology Note Station Client: before 2.2.4-703 (fixed in 2.2.4-703)

Published 2026-06-03. Last modified 2026-07-22.