Synology Beestation OS vulnerabilities

4 CVEs affecting Synology Beestation OS, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-12686, published 2026-05-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-50629, published 2025-03-19. Medium severity, CVSS 5.3. EPSS: 31.7% chance of exploitation in the next 30 days. Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 7.1.1-42962-7,…
CVE-2025-12686, published 2026-05-27. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStation OS before 1.3.2-65648 allows remote attackers to execute arbitrary code via…
CVE-2024-10441, published 2025-03-19. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 7.2-64570-4,…
CVE-2024-10445, published 2025-03-19. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. Improper certificate validation vulnerability in the update functionality in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.1.1-42962-7,…