Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-2848 EUVD-2025-201170GHSA-c2f4-r954-qp5r

A vulnerability in Synology Mail Server allows remote authenticated attackers to read and write non-sensitive settings, and disable some no…

Published Dec 4, 2025 · Updated Dec 4, 2025 · Assigned by synology

Vendor: Synology Product: Synology Mail Server

Description

A vulnerability in Synology Mail Server allows remote authenticated attackers to read and write non-sensitive settings, and disable some non-critical functions.

Affected products

VendorProductAffectedFixed
Synology Synology Mail Server < 1.7.6-10676, < 1.7.6-20676 1.7.6-10676

References