Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-66592 EUVD-2025-209962GHSA-v5xx-f9gc-j856

An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local users to write arbitra…

Published May 27, 2026 · Updated Jun 2, 2026 · Assigned by synology

Description

An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local users to write arbitrary files with restricted content and conduct denial-of-service during installation.

Affected products

VendorProductAffectedFixed
Synology Synology Active Backup for Business Agent < 3.1.0-4967 3.1.0-4967

References