CVE-2023-52947

3.3 lowEPSS 0.2%

Low (3.3) in synology active backup for business agent. EPSS 0.2% chance of exploitation in the next 30 days.

Missing authentication for critical function vulnerability in logout functionality in Synology Active Backup for Business Agent before 2.6.3-3101 allows local users to logout the client via unspecified vectors. The backup functionality will continue to operate and will not be affected by the logout.

Severity

CVSS 3.1

3.3 low

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2024-09-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

synology:active_backup_for_business_agent

References

https://www.synology.com/en-global/security/advisory/Synology_SA_24_11

Check your stack JSON