Known vulnerabilities in BeeStation OS

Vendor: Synology Inc.
Software: BeeStation OS
Software CPE: cpe:2.3:o:synology:beestation_os:*:*:*:*:*:*:*:*
Website: https://www.synology.com/
Total vulnerabilities: 7
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting BeeStation OS BeeStation OS is affected by 7 known vulnerabilities: 1 critical, 3 high, 3 medium Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118474 - Buffer overflow
CVE-2025-12686		 CWE-120 Critical
No
No
 1.3.2-65648 13.11.2025 SB2025111314
#VU107360 - Improper Certificate Validation
CVE-2024-10445		 CWE-295 Medium
No
No
 1.1-65374 10.04.2025 SB2025041037
SB2025041126
#VU107357 - Improper Encoding or Escaping of Output
CVE-2024-50629		 CWE-116 Medium
Available
No
 1.1-65374 10.04.2025 SB2025041037
SB2025041126
#VU107350 - Argument Injection or Modification
CVE-2024-10441		 CWE-88 High
No
No
 1.1-65374 10.04.2025 SB2025041037
SB2025041126
#VU99971 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
 CWE-300 Medium
No
No
 1.1-65374 06.11.2024 SB2024110660
SB2024110661
#VU99970 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
 CWE-89 High
No
No
 1.1-65374 06.11.2024 SB2024110660
SB2024110661
SB2024110663
#VU99968 - Improper input validation
 CWE-20 High
No
No
 1.1-65374 06.11.2024 SB2024110660
SB2024110661