Synology Beestation Os — known CVE vulnerabilities

Every CVE whose affected-product data names Synology Beestation Os, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2024-10441 — CVSS 9.8 (critical): Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS (BSM) before 1.1-65374 and…
• CVE-2025-12686 — CVSS 9.8 (critical): Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStation OS before…
• CVE-2024-50629 — CVSS 5.3 (medium): Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.1-65374 and Synology…
• CVE-2024-10445 — CVSS 4.3 (medium): Improper certificate validation vulnerability in the update functionality in Synology BeeStation OS (BSM) before 1.1-65374 and Synology…