Get the latest tech news
Synology patches unannounced multiple zero-day vulnerabilities
Synology Product Security Advisory
The vulnerability reported in ZDI-CAN-25403 allows remote attackers to execute arbitrary code. The vulnerability reported in ZDI-CAN-25613 allows remote attackers to read specific files. The vulnerability reported in ZDI-CAN-25617 allows adjacent man-in-the-middle attacker to write specific files.
Or read this on Hacker News