CVE-2025-2848

Synology / Synology Mail Server PUBLISHED

Description (CNA)

A vulnerability in Synology Mail Server allows remote authenticated attackers to read and write non-sensitive settings, and disable some non-critical functions.

Affected (CNA)

Vendor / product	Versions
Synology / Synology Mail Server	affected * before 1.7.6-10676; affected * before 1.7.6-20676

CWE

CWE-862

References

https://www.synology.com/en-global/security/advisory/Synology_SA_25_05

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.