Skip to content
OpenAdvisories
Medium · 4.9 CVE-2024-47268 EUVD-2024-55594GHSA-2w9f-2xp2-w98x

Missing authorization vulnerability in AddOns functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remot…

Published May 27, 2026 · Updated May 27, 2026 · Assigned by synology

Description

Missing authorization vulnerability in AddOns functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to obtain sensitive information via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology Surveillance Station < 9.2.2-9575, < 9.2.2-11575 9.2.2-9575

References