CVE-2025-12686

Analyzed Analyzed - Analysis Complete

Buffer Overflow in Synology BeeStation Manager AdminCenter

Publication date: 2026-05-27

Last updated on: 2026-06-05

Assigner: Synology Inc.

Description

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStation OS before 1.3.2-65648 allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-27

Last Modified

2026-06-05

Generated

2026-07-06

AI Q&A

2026-05-27

EPSS Evaluated

2026-07-05

NVD

CVE-2025-12686

EUVD

EUVD-2025-209957

Affected Vendors & Products

Vendor	Product	Version / Range
synology	beestation_os	From 1.0 (inc) to 1.3.2 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

CVE-2025-12686 is a classic buffer overflow vulnerability found in the AdminCenter component of Synology BeeStation Manager (BSM) and BeeStation OS before version 1.3.2-65648. It occurs because the software copies data into a buffer without properly checking the size of the input, which can lead to memory corruption.

This flaw allows remote attackers to execute arbitrary code on the affected system by exploiting unspecified vectors, meaning they can potentially take control of the system remotely.

Impact Analysis

This vulnerability has a high severity with a CVSS base score of 9.8, indicating it poses a critical risk. If exploited, remote attackers can execute arbitrary code on your system without any privileges or user interaction.

The impact includes complete compromise of confidentiality, integrity, and availability of the affected system, potentially allowing attackers to take full control, steal sensitive data, disrupt services, or install malicious software.

Mitigation Strategies

To mitigate this vulnerability, users should immediately upgrade BeeStation OS to version 1.3.2-65648 or later.

Synology has not provided alternative mitigation steps, emphasizing the need for immediate updates.

Compliance Impact

The provided information does not specify how this vulnerability affects compliance with common standards and regulations such as GDPR or HIPAA.

Detection Guidance

Synology has not provided alternative mitigation steps or specific detection commands for CVE-2025-12686.

The recommended action is to upgrade BeeStation OS to version 1.3.2-65648 or later to mitigate the risk of this critical buffer overflow vulnerability.

Hi! I’m here to help you understand CVE-2025-12686. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70