Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2025-2848

A vulnerability in Synology Mail Server allows remote authenticated attackers to read and write non-sensitive settings, and disable some non-critical functions.

Description

A vulnerability in Synology Mail Server allows remote authenticated attackers to read and write non-sensitive settings, and disable some non-critical functions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Synology Synology Mail Server

Default version status: affected

  • * to < 1.7.6-10676affected
  • * to < 1.7.6-20676affected

References