CVE-2022-49036

7.8 highEPSS 0.1%

High (7.8) in synology active backup for business recovery media creator. EPSS 0.1% chance of exploitation in the next 30 days.

An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Backup for Business Recovery Media Creator before 2.5.0-2081 allows local users to execute arbitrary code via unspecified vectors.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-31)
CWE: CWE-829
Published: 2026-06-03
Modified: 2026-07-22
Record from: the NVD, synced 2026-10-19

Affected

synology:active_backup_for_business_recovery_media_creator

References

https://www.synology.com/en-global/releaseNote/ActiveBackupRecoveryMediaCreator

Check your stack JSON