High · 7.5 CVE-2025-14713 EUVD-2025-209959GHSA-jmjf-jwvm-x7jx

An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote a…

Published May 27, 2026 · Updated May 27, 2026 · Assigned by synology

Vendor: Synology Product: C2 Identity Edge Server Category: Browsers

Description

An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from the edge server.

Affected products

Vendor	Product	Affected	Fixed
Synology	C2 Identity Edge Server	< 1.76.0-0307	1.76.0-0307

References

Synology-SA-25:18 C2 Identity Edge Server (PWN2OWN 2025) vendor-advisory