Synology Hyper Backup vulnerabilities

2 CVEs affecting Synology Hyper Backup, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-47273, published 2026-06-03.

More from Synology.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-47263, published 2026-06-03. Medium severity, CVSS 4.1. EPSS: 0.3% chance of exploitation in the next 30 days. An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup.Repository webapi component in Synology Hyper Backup before 4.1.2-4036 allows remote…
• CVE-2024-47273, published 2026-06-03. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup Task functionality in Synology Hyper Backup before 4.1.2-4036 allows remote authenticated…