CVE-2024-47268: Synology Surveillance Station

Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days.

Missing authorization vulnerability in AddOns functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to obtain sensitive information via unspecified vectors.

Affected products

• Synology Surveillance Station: before 9.2.2-11575 (fixed in 9.2.2-11575); before 9.2.2-9575 (fixed in 9.2.2-9575)

Published 2026-05-27. Last modified 2026-06-17.